Endpoint Protection

 View Only
Expand all | Collapse all

Is there a way to disable port scan notifications when from a specific IP?

  • 1.  Is there a way to disable port scan notifications when from a specific IP?

    Posted Feb 11, 2015 12:26 PM

    We are running SEP Enterprise 12.1.5. I see we can turn off notifications entirely, but I don't want to do that.

     

    We have a server-based internal monitoring tool that sometimes triggers an alert when gathering information for itself. We run monthly security scans from a specific workstation.that usually cause notifications to fire. Help Desk always gets calls when this happens.

    I still want notifications from other sources but is there a way to whitelist scans from these 2 IPs so that it doesn't throw alerts to users.

       



  • 2.  RE: Is there a way to disable port scan notifications when from a specific IP?

    Posted Feb 11, 2015 12:29 PM

    That is the only way. That or add a firewall rule to allow or block the traffic.