https://live.paloaltonetworks.com/t5/next-generation-firewall/how-to-exclude-the-source-ip-address/m-p/597621#M3728 <P>how to exclude the source IP from firewall alert in palo alto.The source IP is our internal scanner and should be excluded from alerts</P> Thu, 12 Sep 2024 04:25:00 GMT Venkateshnandini 2024-09-12T04:25:00Z https://live.paloaltonetworks.com/t5/next-generation-firewall/how-to-exclude-the-source-ip-address/m-p/597621#M3728 <P>how to exclude the source IP from firewall alert in palo alto.The source IP is our internal scanner and should be excluded from alerts</P> Thu, 12 Sep 2024 04:25:00 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/how-to-exclude-the-source-ip-address/m-p/597621#M3728 Venkateshnandini 2024-09-12T04:25:00Z https://live.paloaltonetworks.com/t5/next-generation-firewall/how-to-exclude-the-source-ip-address/m-p/597634#M3729 <P>Hi&nbsp;</P> <P>&nbsp;</P> <P>Not sure which alerts you are talking about specifically, but all the profiles will allow the addition of an exclusion for this purpose, they are usually in the form of the threat being assed</P> <P>&nbsp;</P> <P>So For scanning you can add an exclusion in the zone protection profile&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="laurence64_0-1726119694253.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/62186iB6D5C3DAAD94A10C/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="laurence64_0-1726119694253.png" alt="laurence64_0-1726119694253.png" /></span></P> <P>For Anti-Virus you can add an exception for applications,&nbsp;&nbsp;</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="laurence64_1-1726119745169.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/62187iAC4C5A0182185C95/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="laurence64_1-1726119745169.png" alt="laurence64_1-1726119745169.png" /></span></P> <P>Anti-Spyware has both Signature and DNS Exceptions</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="laurence64_2-1726119812058.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/62188iDE02A371FDB58DDE/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="laurence64_2-1726119812058.png" alt="laurence64_2-1726119812058.png" /></span></P> <P>And Vulnerability has signature exceptions as well</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="laurence64_3-1726119875292.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/62189iB1754FAE2484CF5A/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="laurence64_3-1726119875292.png" alt="laurence64_3-1726119875292.png" /></span></P> <P>&nbsp;</P> <P>As you mention scanner I assume it is a network scanner and triggering the alerts from the zone protection profile so I would suggest the first screenshot is where you should start, hope that helps, please leave a like and mark as solution if it did!</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> Thu, 12 Sep 2024 05:48:09 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/how-to-exclude-the-source-ip-address/m-p/597634#M3729 laurence64 2024-09-12T05:48:09Z