Ignoring Future Threat Reports

This topic presents options that you can use to ignore threat reports.

Feeds use a variety of criteria to decide whether a file or site is a threat, and you might not agree with the threat level that is indicated by all of the reports generated by certain feeds. When you review reports and determine that a report is not reporting an actual threat, you can ignore any future instances of reports by the same name.

To ignore reports, select one of the following options:

• On the Search Threat Reports page, on the Actions menu, click Ignore all reports matching this search.
• In the Search Results table on the Search Threat Reports page, set the Ignore button for one report to Yes.
• On the Threat Report Details page, set the Ignore this Report button for one report to Yes.

You can also mark events to be ignored using the Triage Alerts page. See Ignore Future Events for False Positive Alerts.