Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Global Config

You can configure JATP to consider a host to be infected when a certain threat level is reached based on malware downloaded by that host. For example, you can add a host to the infected hosts feed when threshold of .75 is met. That host then appears in the list under Mitigation > Hosts.

To configure the threshold for marking hosts as infected:

  1. From the Config tab, navigate to System Profiles > SRX settings. The Global Config setting is at the bottom of the page.
  2. From the pulldown, select a threshold:
    Table 1: Threat Score Values

    Value

    Severity

    .25

    Low

    .50

    Medium

    .75

    High

    1.0

    Critical

    Note that JATP and SRX use different threat level thresholds. See the JATP and SRX Series Threat Level Comparison Chart for information.

  3. Click the Submit button to save your setting.