IPS follow up signature

[Sagar_Manandhar]

hi,

We have been using the recommend profile for IPS and marked the newly downloaded signature to detect. So my concern, does the newly download signature is marked detected for certain time period or we have to manually configure new signature to  prevent mode as our requirement.

regards,

Sagar Manandhar

[Tomer_Sole · Accepted solution]

Hi, see this guide - it's for R80.10 but some of its concepts are similar to the R77.30 concepts.  https://community.checkpoint.com/thread/6279-ips-protections-in-detect-staging  

[Sagar_Manandhar]

Is there staging option in R77.30? 

[Tomer_Sole]

The default behavior in R77.30 was the same, only in different names and scattered between the profile and the Update Settings.

The behavior on the default profile:

The behavior for updating protections: