Not alert (but still block) network based malware for specific IP

[dgarden]

Hello,

We are brand new customers (coming from an ASA). We just installed our new firewall this weekend, and are trying to tune our email alerts appropriately. One of the things I'd like to do is turn off email alerting for "Network Based Malware" detections for a specific IP. I still want to block the malware, but I don't want to get the email alert for this specific IP (which happens to be our Barracuda Spam appliance). The SPAM appliance (in our DMZ) is obviously getting malicious files sent to it all the time, and each one is currently generating an email alert from FMC. I don't want my staff to become immune to the alerts, but I also want to keep alerts for other network based malware enabled. Is it possible to NOT alert on this specific address?

Thanks!

[yogdhanu]

Hi There,

I am afraid that's not yet possible. if the alert is being generated on FMC, it would be sent to email alert as well.

I would suggest to reach out to TAC or accounts team to raise enhancement for this feature.

Rate if helps.

Thanks,

Yogesh