Strata Cloud Manager
Focus
Focus
Advanced Threat Prevention Powered by Precision AI®

Strata Cloud Manager

Table of Contents


Strata Cloud Manager

Enable and configure Frontier Virtual Patching in the Vulnerability Protection profile in Strata Cloud Manager.
Enable Frontier Virtual Patching in a Vulnerability Protection profile to activate cloud-based predisclosure detection for traffic matched by this profile. The Frontier Virtual Patching tab displays a note that Frontier Virtual Patching is available with an active Advanced Threat Prevention Plus license and PAN-OS 12.2.4 or later.
  1. Select ConfigurationNGFW and Prisma AccessSecurity ServicesVulnerability Protection.
  2. Click Add Profile to create a new profile or select an existing profile to modify.
  3. Select the Frontier Virtual Patching tab.
  4. Enable the Enable Pre-emptive Protections with Frontier Virtual Patching checkbox.
    The detection table displays three severity categories (Critical, High, and Medium) with their default actions.
  5. For each severity category, choose the action to apply when a predisclosure signature of that severity matches traffic.
    The default action for all severity categories is alert. You can set a different action for each severity level independently.
  6. (Optional) Configure overrides for individual Frontier Virtual Patching signatures.
    You can exclude specific signatures from enforcement or change the action for individual Threat IDs. For details, see Frontier Virtual Patching Exceptions.
  7. Click Save to save the profile.
  8. Push your changes to the managed firewalls.
    After the push completes, the firewalls begin downloading the pre-filter and pre-filtering traffic. You can review Frontier Virtual Patching detections in the threat log (available on both the firewall and in Strata Cloud Manager).