From 98e205be0b4fd21c6259bc446fbc87879901a0cc Mon Sep 17 00:00:00 2001 From: Juliana Fajardini Date: Wed, 7 Oct 2026 16:35:40 -0300 Subject: [PATCH] docs: note about no config action support in fw mode For Threat Detection rules Part of Ticket: #9041 --- doc/userguide/rules/config.rst | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/doc/userguide/rules/config.rst b/doc/userguide/rules/config.rst index 65d57086f2..17f598908a 100644 --- a/doc/userguide/rules/config.rst +++ b/doc/userguide/rules/config.rst @@ -55,3 +55,8 @@ Action Config rules can, but don't have to, use the `config` rule action. The `config` rule action won't generate an alert when the rule matches, but the rule actions will still be applied. It is equivalent to `alert ... (noalert; ...)`. + +.. note:: + + Currently, the ``config`` action is not supported in Firewall mode, + for Threat Detection rules.