Running some FTD 1010's with FMC and frequently get Malware Blocks, Threat Detected in Network File Transfer, for Google Chrome updates (and often Adobe Acrobat updates). Most recently is file names 92.0.4515.131_92.0.4515.107_chrome_updater.exe and GoogleUpdateSetup.exe.
I will go through the motions of verifying that the file is what it says it is and then mark it as clean. Is there a better way to handle this? Seeing it so frequently kind of waters down the Network Based Malware alert.
I guess my main questions are:
Do I have something configured too tightly (stated another way - is anyone else seeing the same thing)?
Is there a better way to handle these - what are others doing?
I found an older thread that sort of mentions this, but I did not really learn anything from it.
Mark
