How To Add Exempt IP Addresses From the Threat ...

| Palo Alto Networks Live 3/24/15, 5:50 AM

All Places > Knowledge Base > Documents

How To Add Exempt IP Addresses From

the Threat Monitor Logs Version 10

created by nato on Jun 14, 2013 1:50 PM, last modified by panagent on Sep 16, 2014 8:47 AM

Overview
This document describes the steps to add an Exempt IP address for a specific threat.

Steps
1. Navigate to Monitor > Logs > Threat

2. Click on the target threat name. This is the threat for which the exempt IP addresses are to be added.

https://live.paloaltonetworks.com/docs/DOC-5235 Page 1 of 7
How To Add Exempt IP Addresses From the Threat ... | Palo Alto Networks Live 3/24/15, 5:50 AM

3. Make sure there is a vulnerability profile associated with a security policy. In this example, the 'test123'
vulnerability profile has been applied. At this point, check the box to highlight the profile and add the IP
address (as shown in the image below). Click OK.
Note: The IP address can be the Victim or Attacker (source address or destination address ) as shown in the
following logs.

https://live.paloaltonetworks.com/docs/DOC-5235 Page 2 of 7
How To Add Exempt IP Addresses From the Threat ... | Palo Alto Networks Live 3/24/15, 5:50 AM

4. Confirm the updates by going to the vulnerability profile and clicking on the exceptions tab. From there, click
on the 'IP Address Exemptions" applet, as shown below, to verify the changes.

https://live.paloaltonetworks.com/docs/DOC-5235 Page 3 of 7
How To Add Exempt IP Addresses From the Threat ... | Palo Alto Networks Live 3/24/15, 5:50 AM

5. Dismiss the IP Address Exemptions dialogue box and the click default (reset-both) under Action. Change
the action to allow:

https://live.paloaltonetworks.com/docs/DOC-5235 Page 4 of 7
How To Add Exempt IP Addresses From the Threat ... | Palo Alto Networks Live 3/24/15, 5:50 AM

owner: rkalugdan

3038 Views Categories: Network Tags: threat_exceptions, vulnerability_exceptions

Average User Rating

(11 ratings)

7 Comments

bbarrett_hollister May 1, 2014 2:31 PM

Thanks for writing this up. Definitely saves me a bit of time with tuning.
Like (0)

https://live.paloaltonetworks.com/docs/DOC-5235 Page 5 of 7