https://community.cisco.com/t5/network-security/compromised-host-fmc/m-p/3762225#M984154 sfr acl. but I still see it on the fmc logs. Wed, 12 Dec 2018 18:01:18 GMT Steven Williams 2018-12-12T18:01:18Z https://community.cisco.com/t5/network-security/compromised-host-fmc/m-p/3762158#M983803 <P>I have users trying to access a host that is showing up in FMC events with "red" computer icon which means compromised. The action is allowed in the event log. I have also added this host to bypass the sfr and i still the client getting tcp resets to this host from splunk. How do I fix this?</P> Fri, 21 Feb 2020 16:34:13 GMT https://community.cisco.com/t5/network-security/compromised-host-fmc/m-p/3762158#M983803 Steven Williams 2020-02-21T16:34:13Z https://community.cisco.com/t5/network-security/compromised-host-fmc/m-p/3762210#M983814 How you bypass the client....<BR />Did you whitelist the IP or excluded the IP from the sfr acl. Wed, 12 Dec 2018 17:47:19 GMT https://community.cisco.com/t5/network-security/compromised-host-fmc/m-p/3762210#M983814 Abheesh Kumar 2018-12-12T17:47:19Z https://community.cisco.com/t5/network-security/compromised-host-fmc/m-p/3762225#M984154 sfr acl. but I still see it on the fmc logs. Wed, 12 Dec 2018 18:01:18 GMT https://community.cisco.com/t5/network-security/compromised-host-fmc/m-p/3762225#M984154 Steven Williams 2018-12-12T18:01:18Z