topic Re: Tailored Safe -- 0 Hits in Firewall and Security Management

Tailored Safe -- 0 Hits

Paul_Warnagiris — Thu, 30 Jul 2020 22:46:05 GMT

Good Evening Check Mates!

I have been working with Tailored Safe at a few clients now for a couple of days. The concept is awesome and I'm enjoying digging in. I do have a question though. At three out of three customers I come back with IPS Protection recommendation (without hits). In other-words there are recommendations to turn on preventions with out casing risk to the org. That is great. However, moving from detect to prevent (with hits) and application discovery there are no recommendations. Is this iterative? In other words I first have to turn on the protections without hits? Then the next time I run it I will see detect to prevent "with hits?" And the next time I will see applications? Or am I missing something? I appreciate any feedback. I have reviewed sk164812 and I understand this is not a one time process, but just trying to understand what I'm seeing. I would have thought there would be some detects with hits and applications discovered on the original go-round.

Please let me know if I'm off base.

Thanks,
Paul

Re: Tailored Safe -- 0 Hits

Paul_Warnagiris — Tue, 04 Aug 2020 18:54:33 GMT

Anyone have any input here?

Re: Tailored Safe -- 0 Hits

Tal_Paz-Fridman — Wed, 05 Aug 2020 10:45:41 GMT

Hi - adding @Adi_Ikan and @Avraham_Bechor

Re: Tailored Safe -- 0 Hits

Avi_Bechor — Wed, 05 Aug 2020 14:29:16 GMT

Hi Paul,

Glad that you enjoyed Tailored Safe and find it valuable. We would be happy to cooperate and assist. We will contact you internally to further discuss this.

Thanks,

Avi

Re: Tailored Safe -- 0 Hits

Conor_Mulcahy — Mon, 24 Aug 2020 09:25:17 GMT

Hi, I've been having same issue as described above, is there a fix for this?

Re: Tailored Safe -- 0 Hits

Paul_Warnagiris — Tue, 25 Aug 2020 13:30:21 GMT

I did a remote session with them. They understand the problem and are working on it. I have not had a follow up as of yet.

Re: Tailored Safe -- 0 Hits

Avi_Bechor — Mon, 31 Aug 2020 11:52:31 GMT

Thanks Paul for the fruitful session over Tailored Safe, we have taken your notes and are currently working on developing those for your specific scenarios. We will keep you posted in the mail regarding the progress.

Thanks
Avi

Re: Tailored Safe -- 0 Hits

Anthony_Harvey — Thu, 10 Sep 2020 22:52:36 GMT

Very interested in this as well.

Would like to see/understand more of how the platform & feature are evolving to help with data correlation that is already in the platform.

Re: Tailored Safe -- 0 Hits

Dale_Lobb — Mon, 16 Nov 2020 06:50:07 GMT

So, what was the issue and the solution, assuming one was provided?

The problem with offline conversations like these is that the rest of the community does not benefit from accumulated, recorded knowledge.

Re: Tailored Safe -- 0 Hits

Avi_Bechor — Thu, 31 Dec 2020 09:11:05 GMT

Following the discussion on a few previous issues, we had a few developments, most notably the ability of selecting a custom Tailored Safe profile as a base profile.
AFAIK there are no issues on the matter with the available version of Tailored Safe

We will always be happy to hear any relevant feedback

Thanks,

Avi