False Positive DeskBuild an appeal
VENDOR APPEAL GUIDE

LastLine false positive?
Here’s where to start.

Lastline became VMware NSX Network Detection and Response. Broadcom's current support documentation describes how customers request detection reviews.

Vendor guidance checkedSources reviewed: 2026-10-14Sandbox

Appeal contacts

Choose a channel for the type of detection you want reviewed. Contact availability and acceptance are controlled by the vendor.

How to request a review

Sandbox review

Lastline became VMware NSX Network Detection and Response. Broadcom's current support documentation describes how customers request detection reviews.

  1. Open a VMware NSX/vDefend Network Detection and Response technical support case through Broadcom support and identify the historical LastLine report.
  2. If the file already exists in VirusTotal, provide its hash and report link; Broadcom says its support team can obtain known samples from VirusTotal.
  3. If support needs the sample, place it in an encrypted ZIP, share the password with the engineer and attach it to the support case.
  4. Explain why the verdict or behavior finding is a false positive.
  • This is a customer support process; a valid Broadcom Support Site ID is required to create cases.
  • The successor support route does not guarantee that every historical LastLine report can be revised.

Names you may see in a report

LastLine

Aliases help locate the responsible vendor. Related products can use different submission channels; check the scope shown above.

Sources for this entry

“Guidance checked” means a public vendor source supports the route or instructions. We have not sent a test appeal or verified mailbox delivery. Read our methodology.

← Back to all vendors