Alert Tuning and Scoping Profile

[rtsedaka]

This question was asked during our Customer Success Webinar: Alert Tuning Part 2

Can you provide a quick example of creating a scoping profile and applying it?

[rtsedaka · Accepted solution]

A reply by: @jmazzeo 

Go to Endpoints - Policy Management - Prevention -> Profiles

Create a new profile:

Select the right OS, and then Exceptions:

You only need to set a name and a description if needed, then Create it.

Now, go back to Endpoints—Policy Management—Prevention -> Policy Rules to edit a current policy rule or create a new one.

1. Select your created Exceptions Profile, within all the other required profiles.
2. Select your target using the usual filters for the endpoints.
3. Review and apply.

Verify the order and content of the rules or re-order them to assign agents with the correct policy. Then click on Save at the bottom right.