topic Re: Best way to alert Checkpoint of probable FPs? in General Topics https://community.checkpoint.com/t5/General-Topics/Best-way-to-alert-Checkpoint-of-probable-FPs/m-p/25478#M5146 <HTML><HEAD></HEAD><BODY><P>A TAC case is always your best bet in the case of a false positive.</P><P>I'll see what I can find out from our Threat Operations team, though.</P></BODY></HTML> Sun, 09 Sep 2018 21:52:46 GMT PhoneBoy 2018-09-09T21:52:46Z Best way to alert Checkpoint of probable FPs? https://community.checkpoint.com/t5/General-Topics/Best-way-to-alert-Checkpoint-of-probable-FPs/m-p/25477#M5145 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>Checkpoint IPS has recently (09-08-2018) started erroneously tagging many domains ending in akamaiedge.net as malicious (Phishing_website.upvi) which is creating very large amounts of FP alerts. Here are some examples:</P><P></P><P>&nbsp;e11696.dscg.akamaiedge.net</P><P>e16595.dsca.akamaiedge.net</P><P>e912.f.akamaiedge.net</P><P>e6640.g.akamaiedge.net</P><P>.. etc</P><P></P><P>Hopefully someone at Checkpoint reviews this post and fixes the issue ASAP. Thanks!</P></BODY></HTML> Sun, 09 Sep 2018 12:54:59 GMT https://community.checkpoint.com/t5/General-Topics/Best-way-to-alert-Checkpoint-of-probable-FPs/m-p/25477#M5145 Fred_Joans 2018-09-09T12:54:59Z Re: Best way to alert Checkpoint of probable FPs? https://community.checkpoint.com/t5/General-Topics/Best-way-to-alert-Checkpoint-of-probable-FPs/m-p/25478#M5146 <HTML><HEAD></HEAD><BODY><P>A TAC case is always your best bet in the case of a false positive.</P><P>I'll see what I can find out from our Threat Operations team, though.</P></BODY></HTML> Sun, 09 Sep 2018 21:52:46 GMT https://community.checkpoint.com/t5/General-Topics/Best-way-to-alert-Checkpoint-of-probable-FPs/m-p/25478#M5146 PhoneBoy 2018-09-09T21:52:46Z Re: Best way to alert Checkpoint of probable FPs? https://community.checkpoint.com/t5/General-Topics/Best-way-to-alert-Checkpoint-of-probable-FPs/m-p/25479#M5147 <HTML><HEAD></HEAD><BODY><P>I also encountered a similar problem (<SPAN style="color: #333333; background-color: #ffffff;">09-sept-2018 - 10<SPAN>-sept-2018)</SPAN></SPAN>.</P></BODY></HTML> Wed, 12 Sep 2018 11:15:06 GMT https://community.checkpoint.com/t5/General-Topics/Best-way-to-alert-Checkpoint-of-probable-FPs/m-p/25479#M5147 MK9 2018-09-12T11:15:06Z Re: Best way to alert Checkpoint of probable FPs? https://community.checkpoint.com/t5/General-Topics/Best-way-to-alert-Checkpoint-of-probable-FPs/m-p/25480#M5148 <HTML><HEAD></HEAD><BODY><P>The false positive should have already been addressed by now, assuming you have installed the latest IPS signatures.</P></BODY></HTML> Wed, 12 Sep 2018 18:50:17 GMT https://community.checkpoint.com/t5/General-Topics/Best-way-to-alert-Checkpoint-of-probable-FPs/m-p/25480#M5148 PhoneBoy 2018-09-12T18:50:17Z Re: Best way to alert Checkpoint of probable FPs? https://community.checkpoint.com/t5/General-Topics/Best-way-to-alert-Checkpoint-of-probable-FPs/m-p/25481#M5149 <HTML><HEAD></HEAD><BODY><P>Problem is solved:)</P></BODY></HTML> Tue, 18 Sep 2018 19:52:02 GMT https://community.checkpoint.com/t5/General-Topics/Best-way-to-alert-Checkpoint-of-probable-FPs/m-p/25481#M5149 MK9 2018-09-18T19:52:02Z