Hello,
I have a Firewall Cluster, version R81.10.
Currently the Cluster has the IPS blade active.
Our Cybersecurity area has made the detection of a new signature, which require to know if this signature "impacts" or not to any asset of our company.
I have reviewed in the IPS Protections option from the SmartConsole, the signature that was reported to me, which is:
Vulnerability in Check Point (CVE-2023-34460) (CVSS Score v3: Undefined).
But you will notice in the attached image, that apparently, Checkpoint, does not have it included in its database, or I'm checking wrong????
![IPS2.jpg IPS2.jpg](https://community.checkpoint.com/t5/image/serverpage/image-id/21523iE768DCC21FCC3A54/image-size/large?v=v2&px=999)
What kind of action can be taken in this case?
Currently I have the following version of IPS signatures installed in my Cluster Firewalls.
![IPS3.jpg IPS3.jpg](https://community.checkpoint.com/t5/image/serverpage/image-id/21525i69DDAD85BCA83325/image-size/large?v=v2&px=999)
Just to clarify the doubt, the signatures that I find with the "PREVENT" action in Checkpoint's database, does it mean that Checkpoint "blocks" this type of traffic?
Prevent, is it related to the action of BLOCKING all traffic? Or is it not always like that?
Thanks for your comments.