Excluding hash for particular machine

RamyashreeMada — Thu, 07 Sep 2023 12:06:54 GMT

Hello Team,

- We have added one of the hash in the block list and it is quaratined.

- In one of the test machine we need this file for testing purpose.

- Is that possibke to exclude this hash from the particular machine?

Re: Excluding hash for particular machine

abdrahman — Thu, 07 Sep 2023 16:53:34 GMT

Thank you for reaching out to Live Community. I understand that you would like to allow a hash but only for one endpoint. You can achieve this using the Disable Prevention Rule from Exceptions configuration page. However, please make sure to scope this rule to the only endpoint you would like to do testing upon.

Please find the details of how to configure this Rule from the documentation below, thank you:

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Add-a-Disable-Prevention-Rule

If you feel this has answered your query, please let us know by clicking on "mark this as a Solution". Thank you.

topic Excluding hash for particular machine in Cortex XDR Discussions

Excluding hash for particular machine

Re: Excluding hash for particular machine