Buy or Renew
Buy or Renew
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
1711
Views
5
Helpful
1
Replies

SourceFire false positives because of known vulnerability scanner

brian.mcgraw
Level 1
Level 1

‎09-05-2018 08:42 AM - edited ‎02-21-2020 08:11 AM

Hello, 

 

Our FMC is gerating/dropping a bunch of events when we perform vulnerability scans on our environment. What is the best practice to remove this noise from the FMC?  I do not need the IPS to generate alerts or drop these events. 

Labels:
0 Helpful
1 Reply 1

mikael.lahtela
Level 4
Level 4

‎09-19-2018 09:09 AM

Hi,

 

You can try prefilter or trust the scanner address, without logging.

 

br, Micke

Customers Also Viewed These Support Documents
Review Cisco Networking for a $25 gift card