Add a Support Exception Rule - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Pro Administrator Guide

Product
Cortex XDR
License
Pro
Creation date
2023-10-31
Last date published
2024-03-18
Category
Administrator Guide
Abstract

How to add a support exception rule.

You can define and manage exceptions based on files received from the Customer Support team. You can apply the rule across all of your endpoints or to specific profiles.

Prior to Cortex XDR version 3.5, Support Exceptions were configured through profiles.

Starting with version 3.5, Cortex XDR enables you to manage the Support Exceptions from a central location and easily apply them across multiple profiles in the Support Exception Rules management page. 

To manage the prevention profile exceptions from Exception Configuration, you must first migrate your existing exceptions configured via the Prevention profiles.

Your migrated rules are displayed on the SettingsException ConfigurationsSupport Exception Rules page. For more information about the migration, see Exception Configuration.

Import Support Exception Rules File.

  1. From SettingsException ConfigurationSupport Exception Rules, click + Import from file.

  2. Drag and drop or browse for the JSON file you received from the Customer Support team.

  3. Select to apply the rule to specific Profiles or select Global to apply to all endpoints.