All the other alarms I've checked, like Video Activity, allow a destination and device pair to be muted.
However, Large Bandwidth Usage only allows a device to be muted. There is no "Add Destination" ... in the mute control. My use case is that I don't mind a large bandwidth usage from my computer to my cloud backup provider, but that doesn't mean I'm OK with a large bandwidth usage from my computer to any host in the entire Internet. Is there some other way to set this alarm up?
Also, what's the criteria for Abnormal Upload vs a regular upload? Is there some per-device parameter I can set to use this to check for exfiltration? This alarm has the destination+device pair style of mute.
Please sign in to leave a comment.