Is it possible to make an exception for certain usernames that show up in the event dashboard list? If a vuln scanner account is showing up, each time I have to just ignore it, is it possible to create an exception so it won't show up on the event list?
@hrmcardle0 It depends on which IPS signature you're asking about.
You mentioned vulnerability scanner, so I suspect your referring to the Network IPS port scan signatures (3700/3701). Usernames cannot be used to create IPS exceptions for those signatures; only IP addresses can be used.
KB77236 - How to create Network IPS exceptions for Host Intrusion Prevention