Report - How exclude known IP's from the Threat reports.

Alexandro_Silva — Mon, 14 Aug 2023 12:10:26 GMT

My team added some known IP's in the Threat exceptions, but these IPs still included in Threat reports. How exclude known IP's from the threat reports

Re: Report - How exclude known IP's from the Threat reports.

ozheng — Tue, 15 Aug 2023 01:50:06 GMT

Hello Alexandro.Silva,

I think the best way to do what you are trying to do is to create a specific security policy with no logging action for those specific IPs.

I am not aware of a way to remove the IP from the threat reports (assuming it is the pre-defined ones).
If it is a custom report, you can edit your query to exclude the IPs using the filter builder.

Olivier

topic Report - How exclude known IP's from the Threat reports. in Panorama Discussions

Report - How exclude known IP's from the Threat reports.

Re: Report - How exclude known IP's from the Threat reports.