PCNSA · Question #400
When is an event displayed under threat logs?
The correct answer is A. When traffic matches a corresponding Security Profile. Threat logs are generated only when traffic matches a Security policy rule that has a corresponding Security Profile attached (e.g., Antivirus, Anti-Spyware, Vulnerability Protection, URL Filtering, File Blocking, WildFire). Simply matching a Security policy rule (B) does not cre
Question
When is an event displayed under threat logs?
Options
- AWhen traffic matches a corresponding Security Profile
- BWhen traffic matches any Security policy
- CEvery time a session is blocked
- DEvery time the firewall drops a connection
How the community answered
(32 responses)- A88% (28)
- B3% (1)
- C3% (1)
- D6% (2)
Explanation
Threat logs are generated only when traffic matches a Security policy rule that has a corresponding Security Profile attached (e.g., Antivirus, Anti-Spyware, Vulnerability Protection, URL Filtering, File Blocking, WildFire). Simply matching a Security policy rule (B) does not create a threat log - the rule must also invoke a Security Profile that inspects the content and detects a threat. Not every blocked session (C) or dropped connection (D) generates a threat log; those events are typically captured in Traffic logs. Threat logs are specifically for content-inspection findings triggered by Security Profiles.
Topics
Community Discussion
No community discussion yet for this question.