Operation: Advanced Threat Protection
Description: To configure Advanced Threat Protection. 

Sample Configuration
<ATP> <ThreatProtectionStatus>Enable/Disable</ThreatProtectionStatus> <Policy>alert/drop</Policy> <HostException> <Host>HostName</Host> : </HostException> <ThreatException> <Threat>Threat</Threat> : </ThreatException> <InspectContent>{all/untrusted}</InspectContent> </ATP>



Parameter Mandatory Default Description
ThreatProtectionStatusNo  
Enable/Disable Advanced Threat Protection feature.
ThreatProtectionStatus confines to:
  • Type is 'SCALAR'.
  • Only 'Enable', 'Disable' are allowed.
HostNo  
Add or select the source networks or hosts that should be exempt from being scanned for threats by Advanced Threat Protection.
Host confines to:
  • Type is 'ARRAY'.
  • Datatype is 'STRING'.
  • Multiple values are allowed.
Note:
Applicable only if 'Enable Advanced Threat Protection' is enabled..
InspectContentNo  
Specify the settings to inspect content based on the trust status.
InspectContent confines to:
  • Type is 'SCALAR'.
  • Only 'all', 'untrusted' are allowed.
ThreatNo  
Add destination IP addresses or domain names that you want to skip from being scanned for threats by Advanced Threat Protection.
Threat confines to:
  • Type is 'ARRAY'.
  • Datatype is 'STRING'.
  • Multiple values are allowed.
Note:
Applicable only if 'Enable Advanced Threat Protection' is enabled..
PolicyYes Log Only 
Select the security policy that the Advanced Threat Protection system should use if a threat has been detected.
Policy confines to:
  • Type is 'SCALAR'.
  • Only 'Log Only', 'Log and Drop' are allowed.
Note:
Applicable only if 'Enable Advanced Threat Protection' is enabled..



Operation   Status   Message
Advanced Threat Protection200Operation Successful.
Advanced Threat Protection500Operation Fail.

© Copyright 2019 Sophos Firewall Limited. All rights reserved.
Sophos Firewall is registered trademarks of Sophos Firewall Limited and Sophos Firewall Group. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.
No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.