We are running FirePower 6.6 and have recently been seeing a lot of bad detections around the "built in" GoDaddy definition. As GoDaddy is tagged as webmail, these not-really-GoDaddy sites are being blocked by our "block webmail" apps policy.
Since the root of my problem is that the GoDaddy application detector seems to be running an overly-broad definition, I wanted to turn it off. That'd let any other matching definitions still run, and let us still use the protections we intend without the false positives we've been triggering.
Problem is, I can't seem to figure out how to disable one of the built-in detectors. I can go to Policies -> Application Detectors and filter with "GoDaddy"; but at this point I see two policies with the State toggle disabled (can't turn them off).
Is there any way to disable a built-in application detector so it stops tripping rules with false positives?
(side question, does anyone know what the definition is for this detector -- I'd be interested in finding out why it so easily succumbs to this many false positives)
