- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
09-24-2018 11:40 AM
This screenshot is from the wilfire tab. Why I see this informational block and high alert.
09-24-2018 11:45 AM - edited 09-24-2018 11:47 AM
This is expected behavior and by design.
Informational - the threat (file) was blocked by a Wildfire-virus signature and therefore the firewall alerts the admin at an informational level because the threat was mitigated.
High - the threat (file) was passed by the firewall and not blocked by a Wildfire-virus or Antivirus signature. This could be due to the configuration or due to the fact that a virus signature to detect and block the file does not exist.
You can derive additional context by also reviewing the corresponding Threat logs relevant to the two Wildfire log entries in your screenshot.
09-24-2018 11:45 AM - edited 09-24-2018 11:47 AM
This is expected behavior and by design.
Informational - the threat (file) was blocked by a Wildfire-virus signature and therefore the firewall alerts the admin at an informational level because the threat was mitigated.
High - the threat (file) was passed by the firewall and not blocked by a Wildfire-virus or Antivirus signature. This could be due to the configuration or due to the fact that a virus signature to detect and block the file does not exist.
You can derive additional context by also reviewing the corresponding Threat logs relevant to the two Wildfire log entries in your screenshot.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!