What would be considered Best Practice to determine which IPS protections you can safely disable for your environment?
“Tuning” IPS protections to suit the specific needs of an environment can be accomplished by all of the following EXCEPT:
what factor do you think is contributing most to the high amount of false positives Jerry is receiving?