PAN-OS & Panorama

Table of Contents

PAN-OS & Panorama

Manage Frontier Virtual Patching signature exceptions in the Vulnerability Protection profile on PAN-OS or Panorama.

The Exceptions tab of the Vulnerability Protection profile provides two views: Released Signatures for standard content-based signatures and Frontier Virtual Patching Signatures for cloud-based predisclosure signatures. You can change the action for individual signatures in either view.

Select ObjectsSecurity ProfilesVulnerability Protection and open the profile you want to modify.
Select the Exceptions tab.
Select Frontier Virtual Patching Signatures to switch to the predisclosure signature view.
Each entry displays the following columns:
- Enable—Select to enable an exception for this signature.
- ID—The unique Threat ID for the signature.
- Threat Name—The signature name (generic predisclosure format while under embargo; full descriptive name after disclosure).
- Host—Whether the detection applies to Client or Server sessions.
- Category—Code-Execution (all predisclosure signatures use this category).
- Severity—Critical, High, or Medium.
- Action—The current action for this signature (for example, "default (alert)").
Select the checkbox next to a signature to modify its exception settings.
For Action, choose the action to override the severity-level default.
Click OK to save the profile.
Enable Show all signatures to list all Frontier Virtual Patching signatures. When disabled, only signatures with configured exceptions are listed. Use PDF/CSV to export the signature list.
Commit your changes.

Advanced Threat Prevention

PAN-OS & Panorama

Advanced Threat Prevention

PAN-OS & Panorama

Activation & Onboarding

Next-Generation Firewalls

SASE

Cloud-Delivered Security Services

Network Security

Endpoints

Visibility & Monitoring

Best Practices