Palo Alto Networks defines a recommended default
action (such as block or alert) for threat signatures. You can use
a threat ID to exclude a threat signature from enforcement or modify
the action the firewall enforces for that threat signature. For
example, you can modify the action for threat signatures that are
triggering false positives on your network.
Configure threat
exceptions for antivirus, vulnerability, spyware, and DNS signatures
to change firewall enforcement for a threat. However, before you
begin, make sure the firewall is detecting and enforcing threats
based on the default signature settings:
Get the latest Antivirus,
Threats and Applications, and WildFire signature updates.