Vulnerability Protection Threat level

[murphyj]

I have been trying to figure out if there is away to adjust the Threat level of an event under the Vulnerability Protect.

For Example I have set certain vulnerabilities to drop packages but I want to change the threat of it so its no longer a high threat. Does anyone know a way to do this or is that field something you cant edit? Thanks for you time.

[craymond · Accepted solution]

I am not aware of a method of doing that since it is part of the vulnerability (threat) definition. Even if you found a way to modify it, the next time you downloaded the new threat sigs, it would be overwritten.

[mbutt]

The severity of the threat can not be changed. However you can change the default behavior whether to drop or allow the traffic.

Below doc explains how to create exception on a threat.

https://live.paloaltonetworks.com/docs/DOC-3699

Thanks

[murphyj]

Thanks for your time and information.