AnsweredAssumed Answered

R80.10 Threat prevention policy enforcement order

Question asked by Philipp Philippov on Jul 1, 2018
Latest reply on Jul 9, 2018 by Philipp Philippov



Can you please clarify the order of processing rules in R80.10 Threat Prevention policy, using single layer?

For example, if the first rule(where only Threat Emulation is enabled in profile) is matched, will other rules be checked?

I mean, other rules with Antivirus, for instance.


So, the rule base will look like this:


1   any    any   Profile1(Threat Emulation only)

2   any   any   Profile2(Antivirus and IPS)


Will traffic be checked with Antivirus and IPS here?


Thank you in advance.