WatchGuard : IPS Threat Level Action Critical - DROP or BLOCK

Information

Verify IPS items classified as threat level 'critical' are set to DROP or BLOCK.

Solution

In the Web UI , navigate to the 'Subscription Services' section , click on 'IPS', click the 'Settings' button and then click the drop down box for Threat level 'Critical' -> 'Action' to 'Drop' or 'Block'.

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-4

Plugin: WatchGuard

Control ID: fe056533a003b44e358ab4c489c081ddb71008c2914b856c5cdcabed6a18f084