Forum Discussion
Rchattop_307189
Nimbostratus
NimbostratusBest practice to put security signatures in blocking mode
What is the best practice to put security signatures in blocking mode. Should we put security signatures in blocking mode before putting it in production or will put it in detection mode and after an...
boneyard
MVP
MVPim afraid there won't be any best practice because it just differs per requirements of the user.
do you want to be more safe and risk (some) false positives, put them into blocking right away.
do you want to be a little less safe put them info staging and see if they are hit, investigate and after staging enable them.
