Set up exception profiles and rules - Administrator Guide - Cortex XSIAM - Advanced Endpoint Protection - Cortex - Security Operations

Cortex XSIAM Documentation

Product
Cortex XSIAM
Creation date
2024-03-06
Last date published
2024-04-25
Category
Administrator Guide
Abstract

Exception profiles can be configured to override security policies for known processes, files, digital signers, URLs, BTP rules, telephone numbers, and other exceptions.

Exception profiles override the security policy in scenarios such as:

  • Allow a process or a file to run on an endpoint

  • Allow a known digital signer

  • Allow access to specific URLs (via Safari) or telephone numbers

  • Disable a specific behavioral threat protection (BTP) rule

  • Import exceptions from the Cortex XSIAM support team