Hi Thomas,
Thanks for your reply, but still we are facing the same problem i.e getting the incident generated.
Please guide me on the same for FTP,HTTP to exclude the all 10 series IP network as a destination IP and source is any.
We have already written in System-->Protocol tab ( -,10.0.0.0/8,*;+,*,* ) for exclusion with defined FTP port as 21 and port 80 for HTTP we are still getting the incident generated with same port.
NOTE: I am using endpoint for FTP and HTTP traffic.
Thanks & regards
Pravin