Begin by defining an exclusive filter. Specify the source address, which is the network that is generating large numbers of false positives. Specify all signatures so that no alarms are sent to Security Monitor. Next, define an inclusive filter. Specify the same source address but specify Signatures which are the ones that you want to include.
