We are getting alarms related to the "UDP Received" security event. After checking the flows, it is Microsoft Teams traffic the one triggering the security event. Is it possible to turno of this security event for traffic using a specific set of ports? I normally create role policies where I turn off alarming for the hostgroup or IPs causing the event, but in this case I want to keep the security event enabled to alarm for other traffic than Teams.
Regards.
