config virtual-patch profile

Configure virtual-patch profile.

config virtual-patch profile
    Description: Configure virtual-patch profile.
    edit <name>
        set action [pass|block]
        set comment {var-string}
        config exemption
            Description: Exempt devices or rules.
            edit <id>
                set device <mac1>, <mac2>, ...
                set rule <id1>, <id2>, ...
                set status [enable|disable]
            next
        end
        set log [enable|disable]
        set severity {option1}, {option2}, ...
    next
end

config virtual-patch profile

Parameter	Description	Type	Size	Default
action	Action (pass/block).	option	-	block
	Option Description pass Allows session that match the profile. block Blocks sessions that match the profile.
comment	Comment.	var-string	Maximum length: 255
log	Enable/disable logging of detection.	option	-	enable
	Option Description enable Enable logging. disable Disable logging.
name	Profile name.	string	Maximum length: 35
severity	Relative severity of the signature (low, medium, high, critical).	option	-	low medium high critical
	Option Description low low medium medium high high critical critical

config exemption

Parameter	Description	Type	Size	Default
device <mac>	Device MAC addresses. Device MAC address.	mac-address	Not Specified
id	IDs.	integer	Minimum value: 0 Maximum value: 4294967295	0
rule <id>	Patch signature rule IDs. Rule IDs.	integer	Minimum value: 0 Maximum value: 4294967295
status	Enable/disable exemption.	option	-	enable
	Option Description enable Enable exemption. disable Disable exemption.