This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
ABOUT CHECKMATES CYBER SECURITY COMMUNITY & FAQ
Create a Post
Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
Danny_Yang
Ambassador
Ambassador
‎2018-04-18 12:21 AM

有關IPS/Threat Prevention政策設計的優化與避免誤判方式

Hello All,

如同今天CCSE Training中松倫所提到的，在IPS或Threat Prevention的Log/Event中可能會遇到Severity為High/Critical，但Confidence為Low的情況，對於客戶而言是否需要特別關注或調整安全政策?

基本上各位需要先了解Severity/Performance impact/Confidence這三者的定義，才能進一步跟客戶說明並進行policy tuning

附件檔案內有明確說明上述分類的差異，同時也請參考先前上傳過的R80.10 IPS Best Practice Guide

Cheers,

Danny

Preview file
468 KB
0 Replies
Upcoming Events

    Sort by:
    In-Person

    Thu 15 May 2025 @ 09:00 AM (IDT)

    PA In-Person CloudGuard Workshop (CGNS, WAF, & API Security)
    In-Person

    Tue 20 May 2025 @ 11:30 AM (PDT)

    Las Vegas: Check Point Hybrid Mesh
    In-Person

    Wed 21 May 2025 @ 11:30 AM (MST)

    Tempe, AZ: Check Point Hybrid Mesh
    In-Person

    Tue 03 Jun 2025 @ 09:00 AM (CEST)

    CheckMates LIve France - Workshop Check Point Quantum
    In-Person

    Tue 03 Jun 2025 @ 06:00 PM (EDT)

    Montreal: CPX Recap
    In-Person

    Tue 10 Jun 2025 @ 06:00 PM (EDT)

    Quebec City: CPX Recap
    CheckMates Events