https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/how-to-allow-hash-for-specific-endpoint-on-allow-list/m-p/539869#M4219 <P>There is an option in the hash to&nbsp;define an action-allow&nbsp;list, but it allows the hash&nbsp;for all the endpoints. We need to allow hash for specific endpoints, but we don't want to create a policy and profile for each and every time. Is there a way to allow a hash for a specific user, as shown in the image below, without creating a profile and policy?</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="RajeshPremSingh_0-1682321575543.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/49701iCDF289EE8F632490/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="RajeshPremSingh_0-1682321575543.png" alt="RajeshPremSingh_0-1682321575543.png" /></span></P> <P>&nbsp;</P> Mon, 24 Apr 2023 07:40:30 GMT RajeshPremSingh 2023-04-24T07:40:30Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/how-to-allow-hash-for-specific-endpoint-on-allow-list/m-p/539869#M4219 <P>There is an option in the hash to&nbsp;define an action-allow&nbsp;list, but it allows the hash&nbsp;for all the endpoints. We need to allow hash for specific endpoints, but we don't want to create a policy and profile for each and every time. Is there a way to allow a hash for a specific user, as shown in the image below, without creating a profile and policy?</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="RajeshPremSingh_0-1682321575543.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/49701iCDF289EE8F632490/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="RajeshPremSingh_0-1682321575543.png" alt="RajeshPremSingh_0-1682321575543.png" /></span></P> <P>&nbsp;</P> Mon, 24 Apr 2023 07:40:30 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/how-to-allow-hash-for-specific-endpoint-on-allow-list/m-p/539869#M4219 RajeshPremSingh 2023-04-24T07:40:30Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/how-to-allow-hash-for-specific-endpoint-on-allow-list/m-p/540009#M4220 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/262549">@RajeshPremSingh</a>&nbsp;<BR />Unfortunately, there is no option to&nbsp;<SPAN>add a hash value to allow/block list using Action center - Allow&nbsp;list or Block List for single&nbsp;</SPAN>endpoint.</P> Tue, 25 Apr 2023 03:37:25 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/how-to-allow-hash-for-specific-endpoint-on-allow-list/m-p/540009#M4220 creddy 2023-04-25T03:37:25Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/how-to-allow-hash-for-specific-endpoint-on-allow-list/m-p/540010#M4221 <P>Any workaround&nbsp; for this</P> Tue, 25 Apr 2023 04:13:08 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/how-to-allow-hash-for-specific-endpoint-on-allow-list/m-p/540010#M4221 RajeshPremSingh 2023-04-25T04:13:08Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/how-to-allow-hash-for-specific-endpoint-on-allow-list/m-p/574926#M5978 <P>Hi PaloAlto - is there a plan to add this feature ("Add to Allow list on this endpoint")?</P> Tue, 30 Jan 2024 13:38:06 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/how-to-allow-hash-for-specific-endpoint-on-allow-list/m-p/574926#M5978 MarcinR 2024-01-30T13:38:06Z