Forum Discussion

spalande's avatar
spalande
Icon for Nacreous rankNacreous
Nov 02, 2022

Threat campaign update

What's the recommended way of updating threat campaign signatures? Auto or manual? 

If it's set to auto, does new signatures from TC goes into staging or blocking immediately? 

security
  • Daniel_Wolf's avatar
    Daniel_Wolf
    Icon for MVP rankMVP
    Nov 03, 2022

    Hi spalande, 

    my recommended way is auto updates and blocking immediatley.
    TC are not as generic as attack signatures, they are signatures aiming to protect against a specific attack. For the reason that they are tailored to protect against a specific attack and not a "band aid" for a generic vulnerability, I don't expect false positives (and I never experienced a false positive). Also I want to have always the latest - my sleep schedule doesn't foresee waking up at 3 AM to manually patch against Log4Shell 🙂

    KR
    Daniel