Legacy Exceptions removal

[JasonHoMFT]

We're looking through the Legacy Exceptions and some are no longer needed.  To do this, do we need to activate them and then remove these exceptions? 

Also could I please confirm that these exceptions already exist in the system and by clicking activate, we are migrating them so that they can be managed centrally?

Thanks

[abdrahman · Accepted solution]

Hello @JasonHoMFT 

Thank you for reaching out to the Live Community. I understand that you are looking at the legacy exceptions configuration and would like to know if once activated will the exceptions migrate automatically. 

Please note that starting with version 3.5, Cortex XDR enables you to manage the Legacy Agent Exceptions and Support Exception configurations from a central location and easily apply them across multiple profiles in the Agent Exceptions Management page. 

To manage the Prevention profile exceptions from Exception Configuration, you must first migrate your existing exceptions configured via profiles. Your existing exception profiles are migrated per module.

Cortex XDR simulates the migration to enable you to review the results before activating the migration.

To run the simulation and migrate your exception configurations,

1. Select Settings → Exception Configuration → Legacy Exceptions and click Start Simulation.

2. Review the Legacy Agent Exceptions and the Support Exception Rules.

3. You can then Activate the new agent management page or Cancel to continue using the Prevention Profiles to configure individual exceptions.

For further details please take a look at the document provided below, thank you: 

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Exception-C...