Command Injection Over HTTP Payload

[r1der]

Hello,

During my https inspection testing, I found out my computer was "Prevented" from the following attack: Command Injection Over HTTP Payload protection. I believe it is a false positive since my Microsoft Outlook started having issues sending. I created a TP exception for it and MS Outlook seems to be fine again.
Should I be reporting false positives like this to support? What would I provide? A packet capture?

Thanks!

[PhoneBoy · Accepted solution]

False Positives need to be reported to TAC, correct.
In addition to the usual information (cpinfo output), a packet capture would most definitely be helpful.