Vulnerability Profile Actions | Palo Alto Networks Live 3/24/15, 5:40 AM

All Places > Knowledge Base > Documents

Vulnerability Profile Actions Version 5

created by nrice on Jun 18, 2010 3:08 PM, last modified by panagent on Oct 2, 2014 5:58 PM

This document explains the dierent actions available for vulnerability profiles.

Action Type Action Action Details

alert Log in Threat Log in Threat Log
Log
drop Drop just that Drop that packet. Note that TCP will try to retransmit the packet again, which
packet we will drop again. So essentially, the entire session is blocked for all practical
purposes.
drop-all- Drop all Drop all packets for that session
packets packets for
that session
block Drop all Drop all packets for that session
packets for
that session
reset-client Drop all Drop the packet and send a TCP reset towards client side of TCP connection
packets for
that session
reset-server Drop all Drop the packet and send a TCP reset towards server side of TCP connection
packets for
that session
reset-both Drop all Drop the packet and send a TCP reset to both client and server
packets for
that session

Note that even though both "drop-all-packets" and "block" are the same, they are not provided as choices on the
same menu (simple vulnerability profile lists "block" action while custom vulnerability profile lists "drop-all-
packets" as an action).

The word session is used as a reference to the firewall table when the protocol is UDP.

owner: panagent

2989 Views Categories: Policies Tags: vulnerability, security_policy, anti-virus, security_profile

https://live.paloaltonetworks.com/docs/DOC-1522 Page 1 of 2
Vulnerability Profile Actions | Palo Alto Networks Live 3/24/15, 5:40 AM

Average User Rating

(4 ratings)

1 Comment

jeremyw Sep 17, 2014 7:10 PM

Should this table have column headings?

Like (0)

1.866.320.4788 Privacy Policy Legal Notices Site Index Subscriptions

Copyright 2007-2013 Palo Alto Networks

Home | Top of page | About Jive | Help 2007-2012 Jive Software |

https://live.paloaltonetworks.com/docs/DOC-1522 Page 2 of 2