Vulnerability Signature action is Alert but traffic is getting reset both due to threat

cancel
Showing results for 
Search instead for 
Did you mean: 

Vulnerability Signature action is Alert but traffic is getting reset both due to threat

Cyber Elite
Cyber Elite

In PA  traffic is blocked due to threat signature.

In threat  kogs it shows reset both.

 

When i check the signature it shows default action is alert only???

 

Why PA is resetting the connection when signature shows  action as  alert only???

MP
1 ACCEPTED SOLUTION

Accepted Solutions

This is how the administrator configured the profile
Tom Piens
PANgurus

View solution in original post

3 REPLIES 3

Cyber Elite
Cyber Elite
Have you checked the security profile that is being hit? The default action for a specific signature may be alert, but the profile can be set to, for example, reset both on (all) high severity threats
Tom Piens
PANgurus

Yes check the security profile it shows if alert is high then action is reset.

Why is this behaviour?

MP

This is how the administrator configured the profile
Tom Piens
PANgurus

View solution in original post

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!