topic Re: SmartEvent Global Exclusions in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartEvent-Global-Exclusions/m-p/16283#M90991 <HTML><HEAD></HEAD><BODY><P>Thanks for the response, that is what I ended up doing, I did find a post where the SmartEvent Global Exclusion list doesn't apply to FW logs, only events generated in SmartEvent, so that is probably&nbsp;why it wasn't working there.</P></BODY></HTML> Thu, 15 Nov 2018 13:39:43 GMT Jeff_Richterkes 2018-11-15T13:39:43Z SmartEvent Global Exclusions https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartEvent-Global-Exclusions/m-p/16281#M90989 <HTML><HEAD></HEAD><BODY><P>I am running SmartEvent on a dedicated VM running R80.10, it is picking up millions of FW logs a day from my numerous F5s that have HTTP health probes using non-standard ports, I tried adding the addresses to the Global Exclusions list but I keep getting hits on them, is there a way to filter them out of SmartEvent in R80? In the R77 version I successfully filtered events but these don't seem to be working the same. I guess another solution would be for me to add excpetions in IPS to ignore them too so a log wouldn't be generated....just trying to see if I'm missing something with the SmartEvent exlusion list.</P></BODY></HTML> Wed, 14 Nov 2018 14:23:02 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartEvent-Global-Exclusions/m-p/16281#M90989 Jeff_Richterkes 2018-11-14T14:23:02Z Re: SmartEvent Global Exclusions https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartEvent-Global-Exclusions/m-p/16282#M90990 <HTML><HEAD></HEAD><BODY><P>If it's IPS triggering the log, it would be best to address at the source: add an exception for the relevant traffic.</P></BODY></HTML> Thu, 15 Nov 2018 04:40:03 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartEvent-Global-Exclusions/m-p/16282#M90990 PhoneBoy 2018-11-15T04:40:03Z Re: SmartEvent Global Exclusions https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartEvent-Global-Exclusions/m-p/16283#M90991 <HTML><HEAD></HEAD><BODY><P>Thanks for the response, that is what I ended up doing, I did find a post where the SmartEvent Global Exclusion list doesn't apply to FW logs, only events generated in SmartEvent, so that is probably&nbsp;why it wasn't working there.</P></BODY></HTML> Thu, 15 Nov 2018 13:39:43 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/SmartEvent-Global-Exclusions/m-p/16283#M90991 Jeff_Richterkes 2018-11-15T13:39:43Z