Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 27 subscribers
  • Views 2943 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Advanced threat protection exception not working

l0rdraiden

I have configure the exceptions like this

 

 

And is being blocked anyway by ATP

 

 

Any idea why?



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to rfcat_vk

    Now I have this exceptions like this

     IPS exception like this applied

     

    And now I get DNS requests blocked

     

    IPS seems to be working, but in ATP if i don't use the source IP it looks like the tread exception field is not working properly.

     

    In any case I consider this a bug, since it is an inconsistency, If I whitelist something in ATP I wouldn't expect to see it blocked in the ATP log, if it is an IPS event then it should appear in the IPS log.

  • 0 in reply to l0rdraiden

    Your log is showing it is being blocked by IPS not ATP.

    Application and IPS work hand in hand otherwise you do not get the classification.

    If you think it is a bug, raise a support case.

    Ian