Security Policy Actions- Vulnerability

[karthikeyanB]

Dear All,

Kindly help me understand below query - 

We would like to configure Security Policy Action "Block IP" for Critical, High and Medium level Vulnerability signatures for 3600 sec. As per understanding traffic from source-destination pair; Configurable for a 3600 seconds (period of time) will be blocked.

However request you to clarify whether traffic will be Allow or dropped on first attempt or detection of Vulnerability (Critical, High and medium) signature.

Please clarify.

Thanks in advance

[OtakarKlier]

Hello,

Once it is discovered, it will be blocked going forward for 3600 seconds.

Hope that helps.