How to Change Threshold in the Timing Vulnerability Signature

To change the threshold value under the timing vulnerability signature, do the following:

1. Open the vulnerability profile and search for the Threat ID
2. Click on the "Pencil" icon, before the threat name, as shown below:

   

3. The Edit Time Attribute pop window is displayed. Set the threshold as required:

   

4. Make sure the Exception is enabled 
   
5. Commit the changes.

Note: Not all threats/vulnerability signatures can be modified. There are signatures that do not have any changeable attributes. For example, TID 30003 is a signature for which the attributes cannot be modified. Also, attributes for threat IDs can only be changed if the particular Palo Alto Networks firewall has a valid threat licenses. Otherwise, commits would fail with the following error:

Error: Profile compiler : can not set time attribute on tid <>.

See: Unable to Commit Changes to Threat Attributes

owner: kalavi