You have a false positive in the Log Viewer that you want to exclude from further detection. What should you do?

Question

Options

• Aright-click on that event, select Exempt
• Bgo to the Exempt rules and add that Attack Object
• Cright-click on that event, choose Filter - Not this Value
• Dcreate a policy in the top of the rulebase that ignores that event and make it a Terminal rule

• A
  76% (45)
• B
  3% (2)
• C
  5% (3)
• D
  15% (9)

No community discussion yet for this question.