Palo Alto Networks Knowledgebase: How to Change Threshold in the Timing Vulnerability Signature

How to Change Threshold in the Timing Vulnerability Signature

3447
Created On 02/07/19 23:56 PM - Last Updated 02/07/19 23:56 PM
Device Management Initial Configuration Installation QoS Zone and DoS Protection
Resolution

To change the threshold value under the timing vulnerability signature, do the following:

  1. Open the vulnerability profile and search for the Threat ID
  2. Click on the "Pencil" icon, before the threat name, as shown below:

    Capture.JPG

  3. The Edit Time Attribute pop window is displayed. Set the threshold as required:

    Capture2.JPG

  4. Make sure the Exception is enabled 
    exception
  5. Commit the changes.

 

Note: Not all threats/vulnerability signatures can be modified. There are signatures that do not have any changeable attributes. For example, TID 30003 is a signature for which the attributes cannot be modified. Also, attributes for threat IDs can only be changed if the particular Palo Alto Networks firewall has a valid threat licenses. Otherwise, commits would fail with the following error:

Error: Profile compiler : can not set time attribute on tid <>.

See: Unable to Commit Changes to Threat Attributes

 

owner: kalavi



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClLYCA0&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language