Threat Prevention profile

[dkzndkqh]

In the screenshot, do the Severity and Confidence conditions need to be met together (AND) for the action to be "Prevent," or is it enough if only one of them is met (OR)?
Additionally, between Severity and Confidence, which one takes higher priority?

[Tal_Paz-Fridman · Accepted solution]

The logic is AND:

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_ThreatPrevention_AdminGuide/Conten...