Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
lwhitworth
New Contributor

Disable one specific IPS signature

Figure I'm missing something obvious here.  Our IPS logs are absolutely spammed by the "TCP.Split.Handshake.signature" rule (2000 or so every 5 minutes).  I'd like to disable just this rule and this rule only.  Is there a way?  I've attached a pic of how we've currently go the IPS rules set, which is to do it by severity.

0 REPLIES 0
Labels
Top Kudoed Authors