PAN-OS & Panorama

1. Select MonitorLogsThreat.
2. In the filter bar, add a filter to isolate Frontier Virtual Patching detections.

   Filter by Threat ID to view detections for a specific Frontier Virtual Patching signature, or filter by threat name (for example, (name-of-threatid eq 'Pre-Disclosure Vulnerability Exploit')). You can also identify Frontier Virtual Patching detections by the Cloud Report ID column — FVP detections include a Cloud Report ID, while standard vulnerability detections do not.

3. Select a log entry to view the detection details.

   The detail view displays the threat name, Threat ID, threat category, severity, action taken, direction, source and destination addresses and zones, the matched security policy rule, and the Cloud Report ID. To retrieve the full cloud report, use the Cloud Report ID with the Threat Vault API.

4. (Optional) In the threat log list, click the Exception popup next to a threat entry to open the Threat Details dialog.

   For predisclosure signatures, the Threat Details dialog shows the Threat ID and severity. The Name field displays "Unknown" and the CVE, Vendor ID, and Reference fields are blank because the vulnerability details are not yet publicly disclosed.

   The bottom panel lists the Exempt Profiles that have an exception configured for this signature and indicates which profiles are used in the current security rule. You can also create an exception directly from this dialog.