Forum Discussion

MSZ's avatar
MSZ
Icon for Nimbostratus rankNimbostratus
Feb 08, 2016

Click on Learn

When we see logs and open them. If "Learn" is active then we click it.

 

What will be the next thing to perform? Please elaborate with steps.

 

1 Reply

  • Clicking Learn will add the event as a policy object, which is not always what you want. For instance if you have a learning suggestion for .exe as a file extension you may not want to learn that, while .pdf is probably okay.

     

    I would suggest you go over the policy as it sits now with your web development team to ensure that it matches the application it's protecting.

     

    Once you are satisfied that the policy is accurate, you can go from transparent to blocking mode.