Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Miguel_Angel_Go
Explorer
Jump to solution

Threat Emulations Exceptions - Does It work?


Hi everyone, I need avoid emulation files from safe sites or known sites.

By example I want avoid emulate files from windowsupdate.com or www.checkpoint.com

I try use exceptions but it doesn't work

Thanks in advance!

0 Kudos
1 Solution

Accepted Solutions
Tomer_Sole
Mentor
Mentor

Hi Miguel,

For these type of things I suggest that you proceed with Check Point Support. There is no known limitation with this feature currently.

Please make sure that according to logs you are creating the exception to the rule that matched the emulation. With R80 and the new Threat Prevention Layers, the match goes to the first-match in the first ordered layer that contains the blade and the protected scope.

View solution in original post

0 Kudos
1 Reply
Tomer_Sole
Mentor
Mentor

Hi Miguel,

For these type of things I suggest that you proceed with Check Point Support. There is no known limitation with this feature currently.

Please make sure that according to logs you are creating the exception to the rule that matched the emulation. With R80 and the new Threat Prevention Layers, the match goes to the first-match in the first ordered layer that contains the blade and the protected scope.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events