Description: To decrease false positives, you can ignore traffic from known traffic sources (such as internal scanners).
Follow the steps below to add known traffic source IPs to the ignore list on your Console:
Step 1:
Log in to your Console.
Step 2:
Click on the Gear Icon and then Global Settings.
Step 3:
Click on Ignored IPs and Ports and then enable Ignored IPs and Ports from the menu.
Step 4:
There are a few different options when it comes to the Ignored IPs and Ports feature.
- Comments can be added to help organise the list.
- A wildcard ( * ) can be used on the last byte.
- Ignore based on single IP Addresses.
- Ignore based on a single IP Address and Port.
- Multiple IP ranges are separated by commas ( , )
- Ignore a port from all IP addresses.
- Ignore Port Scan activity from a single IP address.
Read more: How can I ignore only Port Scan activity from hitting my Canary from a specific Source IP?