topic Threat Prevention profile in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Threat-Prevention-profile/m-p/249445#M53758 <P>In the screenshot, do the <STRONG>Severity</STRONG> and <STRONG>Confidence</STRONG> conditions need to be met <STRONG>together (AND)</STRONG> for the action to be "Prevent," or is it enough if only one of them is met (OR)?<BR />Additionally, between <STRONG>Severity</STRONG> and <STRONG>Confidence</STRONG>, which one takes higher priority?</P> Wed, 21 May 2025 06:59:02 GMT dkzndkqh 2025-05-21T06:59:02Z Threat Prevention profile https://community.checkpoint.com/t5/Firewall-and-Security-Management/Threat-Prevention-profile/m-p/249445#M53758 <P>In the screenshot, do the <STRONG>Severity</STRONG> and <STRONG>Confidence</STRONG> conditions need to be met <STRONG>together (AND)</STRONG> for the action to be "Prevent," or is it enough if only one of them is met (OR)?<BR />Additionally, between <STRONG>Severity</STRONG> and <STRONG>Confidence</STRONG>, which one takes higher priority?</P> Wed, 21 May 2025 06:59:02 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Threat-Prevention-profile/m-p/249445#M53758 dkzndkqh 2025-05-21T06:59:02Z Re: Threat Prevention profile https://community.checkpoint.com/t5/Firewall-and-Security-Management/Threat-Prevention-profile/m-p/249449#M53759 <P>The logic is AND:</P> <P><A href="https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_ThreatPrevention_AdminGuide/Content/Topics-TPG/Getting-Started-Custom.htm?TocPath=Custom%20Threat%20Prevention%7CGetting%20Started%20with%20Custom%20Threat%20Prevention%7C_____0#Getting_Started_with_Custom_Threat_Prevention" target="_blank">https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_ThreatPrevention_AdminGuide/Content/Topics-TPG/Getting-Started-Custom.htm?TocPath=Custom%20Threat%20Prevention%7CGetting%20Started%20with%20Custom%20Threat%20Prevention%7C_____0#Getting_Started_with_Custom_Threat_Prevention</A></P> <P>&nbsp;</P> <P>&nbsp;</P> Wed, 21 May 2025 07:15:46 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Threat-Prevention-profile/m-p/249449#M53759 Tal_Paz-Fridman 2025-05-21T07:15:46Z