How to Check or Edit the Default Action of a Threat Signature

Steps

1. On the web GUI, go to Objects > Security Profiles > Anti-Spyware (or Vulnerability Protection).
2. Click on any of the profiles and go to the Exceptions tab:
   
3. Check the "show all signatures" box to view the threats and corresponding actions. To edit the action taken for a particular threat, click on the action.
   Note: The "predefined" profiles are read-only and cannot be modified.
   

Alternatively, the default action can be checked on the threat vault at the following link: (https://threatvault.paloaltonetworks.com/)

1. Enter the Threat ID and specify the type of threat:
   
2. Click on the magnifying glass icon beside the Threat ID, as shown above: