Who rated this post

cancel
Showing results for 
Search instead for 
Did you mean: 
Timothy_Hall
MVP Gold
MVP Gold

There are four classes of what are commonly considered IPS protections/signatures:

1) IPS ThreatCloud Protections (15,000+ and always increasing)

2) Core Activations (39)

3) Inspection Settings (146)

4) Geo Policy (deprecated and replaced by Geo Updatable Objects)

The Default_Protection profile is related to Inspection Settings.  How you deal with each of these classes (profiles, creating exceptions, etc) is quite different and nicely covered in the upcoming 2-day Check Point Threat Prevention Specialist class, that should should be released to Check Point ATCs worldwide at the end of this month.  Highly recommended!

Gaia 4.18 (R82) Immersion Tips, Tricks, & Best Practices Video Course
Now Available at https://shadowpeak.com/gaia4-18-immersion-course

View solution in original post

(1)
Who rated this post