We have a client who is hesitant to block on threat signatures unless the signature has a high confidence that it will not create false positives. He says this is available in Checkpoint. I'm still searching for documentation on PA, but haven't found anything yet. Is this possible? Thank you!