Safelisting in FireEye

Created by Antonio Ortiz, Modified on Fri, 11 Sep, 2020 at 8:35 AM by Jason Carreiro

Question

How can I safelist in FireEye to stop system clicks (false positives) in my Phishing campaigns?

Answer

Please refer to FireEye's Kb article at https://fireeyecommunity.force.com/CustomerCommunity/s/article/000002612.

This FireEye article covers both FireEye cloud-based (ETP) and on prem (EX) email security products. Both use a common engine to analyze URLs (the process that produces the erroneous clicks) but have different exclusions processes.