cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1610
Views
5
Helpful
1
Replies

SourceFire false positives because of known vulnerability scanner

brian.mcgraw
Level 1
Level 1

Hello, 

 

Our FMC is gerating/dropping a bunch of events when we perform vulnerability scans on our environment. What is the best practice to remove this noise from the FMC?  I do not need the IPS to generate alerts or drop these events. 

1 Reply 1

mikael.lahtela
Level 4
Level 4

Hi,

 

You can try prefilter or trust the scanner address, without logging.

 

br, Micke

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card