Palo Alto Networks Knowledgebase: How to Configure a Data Filtering Profile to Alert but Not Block
How to Configure a Data Filtering Profile to Alert but Not Block
Created On 02/08/19 00:02 AM - Last Updated 02/08/19 00:02 AM
Configure a Data Filtering Profile on the web UI at Objects > Security Profiles > Data Filtering.
The Alert Threshold and Block Threshold fields specify how many instances of a data match, within a single session, that must be observed before the Palo Alto Networks device performs an alert or block action, respectively.
To configure a Data Filtering Profile that will alert and not block, set the value of the Alert Threshold to a non-zero value and set the Block Threshold to 0.