Vulnerability Signature action is Alert but traffic is getting reset both due to threat

Reply
Highlighted
Cyber Elite

Vulnerability Signature action is Alert but traffic is getting reset both due to threat

In PA  traffic is blocked due to threat signature.

In threat  kogs it shows reset both.

 

When i check the signature it shows default action is alert only???

 

Why PA is resetting the connection when signature shows  action as  alert only???

MP

Accepted Solutions
Highlighted
L7 Applicator

This is how the administrator configured the profile
Tom Piens - PANgurus.com
Find my book at amazon.com/dp/1789956374

View solution in original post


All Replies
Highlighted
L7 Applicator

Have you checked the security profile that is being hit? The default action for a specific signature may be alert, but the profile can be set to, for example, reset both on (all) high severity threats
Tom Piens - PANgurus.com
Find my book at amazon.com/dp/1789956374
Highlighted
Cyber Elite

Yes check the security profile it shows if alert is high then action is reset.

Why is this behaviour?

MP
Highlighted
L7 Applicator

This is how the administrator configured the profile
Tom Piens - PANgurus.com
Find my book at amazon.com/dp/1789956374

View solution in original post

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!