Threats alert

[tiwara]

Hello Team,

I have configured the panorama threat alert for one of our firewall and its working fine. Alerts has been configured for High and Critical .

we are getting so many alert from one IP (10.32.100.238) , one of vulnerabilities management device . I want to create a rule so that we can exclude the alerts from the source IP 10.32.100.238 and add it to white-list .

[HULK]

Hello Amber

Could you please let me know the “Threat ID” for all those messages. If the destination is one of your security device used for vulnerabilities management, you can make an exception into the “Vulnerability “ profile and set action to “ allow” ( default action would be alert).

Hope this helps.

Thanks

[tiwara]

Hello ...

Thanks for your help .

I have created a new security profile rule with VPP and allow the traffic for the particular source IP. works fine.