We have a backup server running Veeam that uses Remote code execution to run its backup items. We added the Source Backup Server to the devices list , however it still came up as an Alert
Raise a ticket with Microsoft and in the end we had to Whitelist the IP address instead of the Device