Add a Support Exception Rule - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

You can define and manage exceptions based on files received from the Customer Support team. You can apply the rule across all of your endpoints or to specific profiles.

Prior to Cortex XSIAM version 1.3, Support Exceptions were configured through profiles.

Starting with version 1.3, Cortex XSIAM enables you to manage the Support Exceptions from a central location and easily apply them across multiple profiles in the Support Exception Rules management page. 

To manage the prevention profile exceptions from Exception Configuration, you must first migrate your existing exceptions configured via the Prevention profiles.

Your migrated rules are displayed on the Settings → Exception Configurations → Support Exception Rules page. For more information about the migration, see Exception Configuration.Exception Configuration

Import Support Exception Rules File.