This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ipsExceptions for false positives

Hi,

I have a 'MALWARE-OTHER Executable control panel file download request' false positive that I need to put an exception in for.

I don't want to exclude the entire rule or detection, just whitelist this host that is triggering the false positive.


How is this done?

Thanks

Damien



This thread was automatically locked due to age.
Parents
  • Hi, Damien, good to see you made it over here!

    Just add a 'Network/Host Exception' in 'Advanced Threat Protection'.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Hi, Damien, good to see you made it over here!

    Just add a 'Network/Host Exception' in 'Advanced Threat Protection'.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children