Cortex XDR Temporary Exception query.

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Cortex XDR Temporary Exception query.

L3 Networker

We have been using Cortex XDR for over 200 days without any temporary exceptions. However, it has only been allowed for 180 days. How can we resolve this problem? I have attached a screenshot for your reference.


Cyber Elite
Cyber Elite


I'm kind of confused on what your question is to be honest. Do you need to have the exception for the next 200 days, or are you thinking that you need to set it to how long you've been using XDR? The exception time frame just needs to match how long the exception will be required, not how long you've been using XDR.

In the event that you actually need to set the device with an exception for 200 days, you would simply add the device to the permanent exception list. You'd need to manually create a calendar entry or something to remove the device exception once it's not needed anymore instead of relying on an automated removal. Alternatively, you could use the API and setup a script to remove the exception once the 200 days has passed; that would obviously be a lot more work than simply creating a calendar entry, and you'd want to be familiar with the API if you pursue that process.

  • 1 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!