Support Center > Search Results > SecureKnowledge Details
How to submit a False Positive case for Anti-Bot and Anti-Virus protections
Solution

In order to submit False Positive report for Anti-Bot and Anti-Virus, collect the following information and open a support ticket with Check Point Support:

  • Screenshots and complete text of the suspected false positive logs from the SmartView Tracker:

    1. In SmartView Tracker, in the left pane, go to "Threat Prevention" - go to "By Blade" - click on "Anti-Bot" or "Anti-Virus"
    2. Double-click on each relevant log
    3. Take a screenshot of each relevant log
    4. At the top of each relevant log, click on "Copy Details" - paste the details in a text file (use any text editor)


  • Traffic capture (TCPdump / FW Monitor) from involved Security Gateway during the false positive incident. 
  • Sample of the relevant file that has been prevented or detected, with MD5 for integrity verification.

  • CPinfo file from the Security Management Server involved in the case.

  • CPinfo file from the Security Gateway involved in the case.
This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment