The method depends on the management platform.

For CSPM use hte Advanced Filter Tab, and for nrConfigure use the Filter tab.

Be sure to have the latest signature update loaded on both the sensors as well as the management stations. Without it on the management station the management station won't know how to exclude it.

In a worst case scenario you can:

1)If using nrConfigure manually add the following line to the bottom of packetd.conf on the sensor

then double click on the sensor in nrConfigure

donwload the change packetd.conf file with the change

then apply the same version in order to have the sensor read the configuration.

RecordOfExcludedPattern 3111 * *

example:

RecordOfExcludedPattern 3111 * * 10.10.10.10

2) If using CSPM then place the above line in the Epilogue field, update the database, and approve the configuration. Items in the Epilogue will be added to packetd.conf.

If you just want to turn the signature off then

1) If using nrConfigure set the severity level of the sig to 0

2) If using CSPM desable the signature by removing the enable checkmark