Cortex XDR 3.5 - Whitelist UI

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Cortex XDR 3.5 - Whitelist UI

L3 Networker

Hello,

 

How Legacy Exceptions are different from Policy/profiles in Policy management.

1 REPLY 1

L6 Presenter

Do you mean exclusions as if so there is a discussion about this as one supresses the alarms and the other is a real whitelist https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cortex-xdr-exclusions-vs-exceptions/td-p... .

 

Or you mean the real old XDR 3.5 and below legacy exceptions as then just see https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Exception-C...

 

---------

 

Prior to Cortex XDR version 3.5, Legacy Agent Exceptions and Support Exceptions were configured through their relevant profiles.

Starting with version 3.5, Cortex XDR enables you to manage the Legacy Agent Exceptions and Support Exception configurations from a central location and easily apply them across multiple profiles in the Agent Exceptions Management page. 

To manage the Prevention profile exceptions from Exception Configuration, you must first migrate your existing exceptions configured via profiles. Your existing exception profiles are migrated per module.

Cortex XDR simulates the migration to enable you to review the results before activating the migration.

 

 

---------------

 

 

Also this are usefull info as some file and folder whitelists are not in the Exceptions profile:

 

https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/different-process-exception-on-exception...

 

https://www.youtube.com/watch?v=-Bzed6rRoSs

 

  • 984 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!