WatchGuard : IPS Threat Level Action High - DROP or BLOCK

Information

Verify IPS items classified as threat level 'high' are set to DROP or BLOCK.

Solution

In the Web UI , navigate to the 'Subscription Services' section , click on 'IPS', click the 'Settings' button and then click the drop down box for Threat level 'High' -> 'Action' to 'Drop' or 'Block'.

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-4

Plugin: WatchGuard

Control ID: ece12f9d792135699f0be46d9a60b8e879c915b5c61684849eea8028718341cb