11-10-2025 04:08 PM
Hi,
We have confirmed through the official manual that XDR does not perform evaluation on files or paths allowed under XDR Legacy Agent Exception.
What I would like to know is whether files covered by a Legacy Agent Exception policy also do not generate alerts.
I would also like to confirm if this behavior is explicitly stated in the official documentation.
Currently, we have observed that even after configuring Alert Exclusions, alerts of the same type continue to appear.
While we could add additional Alert Exclusions, our goal is to use Legacy Agent Exception for items that should be clearly allowed, in order to reduce unnecessary alert counts.
Questions:
Do files/paths configured under a Legacy Agent Exception also prevent alert generation?
Is this behavior officially documented?
Thank you.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
