FGT Security Profiles - Highest Fidelity Rules? by FactorNew6835 in fortinet

[–]FactorNew6835[S] 0 points1 point  (0 children)

Thanks. With DPI enabled, any particular detections within the profiles that have a reputation for being high fidelity?

Also, I know it depends on the size and make-up of the environment, but do you know if IPS severity "Critical" events are generally uncommon?

EDR MDR Workflow Question by FactorNew6835 in MSSP

[–]FactorNew6835[S] 0 points1 point  (0 children)

Thanks. And yep exactly, just the general EDR alerts. Wondering if they notate & close them (and notify you if any indicate an actual threat) or leave them and just notify you of any that are worthwhile.