Temporary exception in "Allow list"?

E_Ramier755 — Wed, 09 Aug 2023 09:39:36 GMT

Hello, is it possible to set a temporary exception in "Allow list"?
When you want to make an exception but for a limited time; until an identified date.
Once this date has passed, the rule would be automatically deactivated...

Re: Temporary exception in "Allow list"?

neelrohit — Wed, 09 Aug 2023 10:02:32 GMT

Hi @E_Ramier755 ,

Thank you for writing to live community!

Assuming you are mentioning for prevention policy rules, we do not support or have implemented a feauture for temporary allow list/ exception as this is centred around implementation of execution control in the environment. In Cortex XDR realm, we generally create exceptions for allowing executions for certain applications which is being treated as a false positive and the detection logic more or less would remain the same(except in special reported cases) for execution. As a result, we do not have a feature for temporary whitelists or exceptions for prevention policy rules.

Hope this helps. Please mark the response as "Accept as Solution" if this helps.

topic Temporary exception in "Allow list"? in Cortex XDR Discussions

Temporary exception in "Allow list"?

Re: Temporary exception in "Allow list"?