Skip to main content
philp
New Member
Jul 27, 2024 7:12 AM UTC
Question

Pass-through & Block Action

Hi all,

I have found two events with the same session ID and with the same URL but one had action block and the other had pass-through.

So is it passed or not? In other words, is it possible for one request to have pass-through and block actions in the same time?

1 reply

ebilcari
Staff
Staff
Jul 27, 2024 7:46 AM UTC

You haven't shared enough details but, if the deny action is caused by policy 0 (implicit deny) and the second rule that allows is from a rule that includes some type of active/passive authentication this should be the normal behavior.

Translate
Emirjon
Risk and Resilience in the Age of AI. An OT Thought Leadership Summit for Houston's Critical Infrastructure Leaders. Date: Thursday, December 3, 2026. Time: 8:30 am - 1:30 pm (CT). Location: The Westin Houston, Memorial City | 945 Gessner Road, Houston, TX 77024