Global Exceptions

RamyashreeMada — Mon, 06 Mar 2023 05:26:11 GMT

Hello,

We need to add a global exceptions on the paths. Currently we have added file paths in endpoint scanning allow list. So can you confirm if we exclude in this scan does it applicable for other profile like Portable Executable and DLL Examination, Anti Webshell Protection, Global Behavioral Threat Protection Rules, etc..

Re: Global Exceptions

PiyushKohli — Mon, 06 Mar 2023 08:01:59 GMT

Hi @RamyashreeMada

Thank you for writing to live community!

Regarding your query above, added file paths in endpoint scanning allow list will only create exception for Endpoint Scanning module. It won't create exception for other protection module. Therefore, If you would like to have exception from other protection modules like Portable Executable and DLL examination then you would have to select that specific module also for exclusion.

Reference: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Exception-Configuration

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Add-a-Legacy-Exception-Rule

Hope this helps!
Please mark the response as "Accept as Solution" if it answers your query.

Thank You

topic Global Exceptions in Cortex XDR Discussions

Global Exceptions

Re: Global Exceptions