| Description |
This article describes that in FortiWeb after an exception is added in a signature for a false positive trigger, there will be no more attack log for the false positive trigger of the signature. If it is still desired to keep track of the traffic that has been exempted, it can still be recorded in the traffic log. |
| Scope | FortiWeb. |
| Solution |
For example, originally there was a false positive trigger of the signature 040000137.
Then exception was added for client IP 30.30.30.10 in the signature.
After that, there was no more attack log found for this signature for the client 30.30.30.10, but the traffic log still existed (if the traffic log had been enabled).
Related documents: Configuring action overrides or exceptions to data leak & attack detection signatures |
