Hi @Jon_AK
I suppose that, you sre using central management. (if not, and you are using local management, the method can be similar)
If I understand correctly you are unable to create an exception for this "command injection"
I don't know how tried to do that but you can apply an exception by the Core protections
The descriptions of the steps is under the screenshot
![exception.png exception.png](https://community.checkpoint.com/t5/image/serverpage/image-id/27449iF1F0B3D2EA281272/image-size/large?v=v2&px=999)
1-3 steps: this is straightforward
4-5: add the "Type" critera to the filter column
6: select the Core
7: choose the "command injection"
8: select exceptions
9: add the exception as you wish
Unfortunately I can't test it in my lab, because I can't reproducate the issue.
The corresponding documentation: documentation: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_ThreatPrevention_AdminGuide/...
Editing Core IPS Protections
To edit core protections
Step
|
Instructions
|
1
|
Go to .
Note - To filter for core protections, select in the pane.
|
2
|
Right-click a core protection and select .
|
3
|
Configure the required settings.
|
4
|
Install the Threat Prevention policy.
|
I hope it helps,
Akos