Add a support exception rule - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Documentation

Product
Cortex XDR
Creation date
2024-03-06
Last date published
2024-10-01
Category
Administrator Guide
Abstract

Learn how to add a support exception rule.

You can define and manage exceptions based on files received from the customer support team. You can apply the rule across all of your endpoints or to specific profiles.

Keep in mind the following:

  • Prior to Cortex XDR version 3.5, support exceptions were configured through profiles.

  • Starting with version 3.5, Cortex XDR enables you to manage the support exceptions from a central location and easily apply them across multiple profiles on the Support Exception Rules page. 

To manage the prevention profile exceptions from Exception Configuration, you must first migrate your existing exceptions configured via the Prevention profiles.

Your migrated rules are displayed on the SettingsException ConfigurationsSupport Exception Rules page. For more information about the migration, see Exception configuration.

  1. From SettingsException ConfigurationSupport Exception Rules, click + Import from file.

  2. Locate the JSON file you received from the customer support team.

  3. Select to apply the rule to specific Profiles or select Global to apply to all endpoints.