Skip to main content
sims
sims
Explorer II
September 1, 2020
Question

Ips Action Default

  • September 1, 2020
  • 1 reply
  • 4045 views

Hi

 

 

Ips default action change from  block to monitor, why it is changing in the database also ? 

 

If I need two sensor, in one  I need to block  and the other one I need to monitor 

What is the default action in the signature database ? 

 

Thanks 

    1 reply

    Yurisk
    SuperUser
    Yurisk
    SuperUser
    September 2, 2020

    Default action of most of the signatures is PAss/Monitor, this is done by Fortinet to prevent false positives. Also, it may change per signature basis after an IPS update.

    TO control the signature action use Signature Override, which was created exactly for that, such action will not be changed by updated to IPS.

     

    Terms & ConditionsAccessibility statement