---
updatedAt: 2025-11-19T15:05:25.000Z
agentTools:
  projectIndex: https://docs.rackspace.com/llms.txt
---

# Rackspace notifications security event FAQ

### Notifications

<details>
  <summary>
  What are these notifications?
  </summary>
  <p>If you have a next-generation firewall (NGFW) or another security device, it might push log events from the security technology's actions to the notification portal.</p>

  <p>For example, if you have enabled a threat license on a Cisco&reg; Firepower Threat Defense (FTD)-enabled appliance, the device sends notification of events that match a policy and signature in the intrusion prevention system (IPS) threat engine. This notification relays the disposition of the event.</p>
</details>

<details>
  <summary>
  What events do I see in the notification portal?
  </summary>
  <p>You see high and medium-level events, as defined by the Cisco Talos Intelligence Group (Talos), in the Rackspace Notification Service (RNS). Low-level events are typically false positives or unremarkable events that might flood your RNS-service queue.</p>
</details>

<details>
  <summary>
  What should I do if I feel an event is a false positive?
  </summary>
  <p>If you suspect an alert is a false positive, open a ticket with Netsec support, and ask them to investigate the event. If this is a known-source IP address, you can optionally trust the source by adding it to an allow-list. This action disables the IPS rule for that host or network.</p>
</details>