Threat Logs

[mrsorensen]

When looking at Threat Logs, I see the action is reset-both or drop. What action should I be taking with these? Anything?

[OtakarKlier]

Hello,

The only I would do is to make sure you only allow inbound traffic from a limited number of sources. That is only if you have internal resources you need those on the internet to access, like a web server. If there are no resources people on the internet  need to access, I would just drop all of it.

Regards,