Threat Protection Allow list files

[Kyojuro]

Hello, 

Can anyone help me understand how to use this function in Meraki AMP?

Meraki states " For files, javascripts, and other objects that are not URLs, the MX appliance assigns a unique ID. You can see the blocked items in the Event log page. By entering the ID of the object you want to allow in the Allow list files section you can instruct the appliance to allow the detected signature, even if the URL is different."

I'm looking in the Event Log Page of the dashboard for any kind of Object ID and I'm not seeing anything like that. Is there somewhere else I should be looking? Seems like there aren't any tutorials for this on the web either. 

Thank you. 

[ww]

if you dont have any hits you cant see them and not allow them

[PhilipDAth]

If it is not there, try looking under:

Security & SD-WAN/Security Centre/MX Events

[PhilipDAth · Accepted solution]

Actually, it is in the main event log.  Try filtering on blocked files to see only those events.