Challenge 2
Challenge Description
One of the company's accountants said they cannot access a specific site - upon research the administrator discovers they are blocked by an IPS protection. The administrator is then is asked to add the relevant exception based on the log investigation.
Up to
Faster
Up to
Fewer clicks
Up to
Reduction in menus
Challenge Summary
Time
Clicks
Challenge 2
The admin used the IPS block log to automatically create the needed exception
Check Point Security Management offers a two-click creation of exception rules directly from the security log. All relevant rule fields are auto-completed.
How it’s done with Check Point
Challenge 2
The admin performed multiple steps to create an exception and add it to the rule
In order to create an exception from a security log, Palo Alto Networks management interface requires cloning the existing security profile, adding the relevant exception manually and updating the vulnerability protection profile in the selected rule.
How it’s done with PAN
Challenge 2
The admin had to manually add the exception to the IPS profile
Fortinet's Fortigate management interface requires manual editing of the IPS profile which involves several menus including finding the exact protection and the action that should be configured accordingly.
How it’s done with Fortinet
Challenge 2
The admin suffered significatnt perfomance and usability issues to complete this Challenge
Cisco Firepower management requires the admin to create a new IPS profile and addd the exception accordingly. This operation introduces significant performance issues as the admin had to wait on average 45 seconds for the creation of the new IPS profile to complete. In addition, changing the IPS rules in the selected profile is cumbersome and not intuitive.
