What is the Unique Threat ID 60000?

10627

Created On 10/27/22 07:00 AM - Last Modified 10/27/22 07:12 AM

Data Filtering

Data Filtering Log

Objects

Signatures

Threat Prevention

8.1

9.1

10.0

10.2

10.1

PAN-OS

Question

What is the Unique Threat ID 60000?

This signature detects data patterns, configurable in the data filtering profile. Any pattern configured regardless of whether it is a Predefined Pattern, Regular Expression, or File Properties will trigger the same unique Threat ID 60000 visible in the Data Filtering Logs. See below a sample of the signature triggering in 2 different types of patterns.

Detection of a predefined pattern

Data Filtering logs.png

Detection of a regular expression

DFL regular expresion.png

Prevent sensitive, confidential, and proprietary information from leaving your network by using predefined patterns, built-in settings, and customizable options. You can protect files that contain credit card numbers, regulated information from different countries and third-party data loss prevention (DLP) labels.
Threat-ID range:
- 60000 – 69999: Data filtering detection