Is there a way of testing if a specific Threat Signature is enabled? I recently automated critical threat signatures. both vulnerabilities and anti-spyware, to be set to reset-both, but I want to make sure it is working and the new critical signatures are indeed enabled and ready to reset-both. I have done some random searches and haven't been able to find one that has been hit and I really don't want to take the wait and see approach here. Thoughts?
The best way to test it would be to run a pentest. Obtain the proof of concept (PoC) and run the exploit through the box. If it doesn't fire, that would be a great false negative finding and you should report it, providing a full client packet capture and details on the PoC to Palo Alto Networks Support, to review how the signature needs to be improved.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The Live Community thanks you for your participation!