This task list summarizes the steps for whitelisting noisy SmartVision alerts (including data exfiltration alerts):
Prerequisites
Admin access to the SmartVision appliance.
To whitelist noisy alerts:
Whitelist conditions that trigger only false-positive alerts.
To eliminate all SmartVision alerts (including data exfiltration alerts) triggered by a particular combination of rule ID, traffic source, and traffic destination, you can create an entry in the alerts whitelist.
Whitelist upload destinations that trigger only false-positive data exfiltration alerts.
To eliminate all data exfiltration alerts (but not other types of SmartVision alerts) triggered by data uploads to a particular destination, you can whitelist the destination host or network.