Fortigate IPS action

[Austin_M]

Hi Guys,

We have IPS sensors configured for incoming traffic from the internet and the action is currently configured to be signature defaults. This setting leaves around 178 critical signatures with the action of PASS. Could someone please recommend me if this should be changed to action BLOCK.  

[Wayne11]

Just recognized the same thing and I wonder why we have so many signatures with severity Critical but the Action is by default set to PASS.

Would be great someone could explain.

Thx