What actions can you take to prevent IPS false positives?
Packet captures allow IPS events to be validated and tuned against the actual traffic. Keeping the IPS database current incorporates updated detection content, and backing up custom IPS files preserves local tuning intended to avoid recurring false-positive behavior.
Community Discussion