WatchGuard : IPS Threat Level Action Medium - DROP or BLOCK

Information

Verify IPS items classified as threat level 'medium' are set to DROP or BLOCK.

Solution

In the Web UI , navigate to the 'Subscription Services' section , click on 'IPS', click the 'Settings' button and then click the drop down box for Threat level 'Medium' -> 'Action' to 'Drop' or 'Block'.

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-4

Plugin: WatchGuard

Control ID: f78ec4fafa03e86434cf2b327427466328f06be7157c9bcce5b2058312a5c745