We have Recently setup the FireSIGHT Server and are now getting 100's of the MALWARE-OTHER self-signed SSL certificate Alerts. The Source and Destination IPs are from Nest's DropCam Services and our DropCams. I'd like to Keep the system Alerting me to these kinds of events, though want it to Ignore the alerts when the destination is one of the 10 DropCams we have. Any Suggestions on this would be great!
Thank you
Timestamp : 2015-08-12 10:37:23
Protocol : tcp
Alert Message : MALWARE-OTHER self-signed SSL certificate with default Internet Widgits Pty Ltd organization name (1:19551:6)
Session : 52.6.210.94:443 -> 10.1.3.174:57446
