Set up exception profiles and rules - Administrator Guide - Cortex XSIAM - Advanced Endpoint Protection - Cortex - Security Operations

Cortex XSIAM Documentation

Cortex XSIAM
Creation date
Last date published
Administrator Guide

Exception profiles can be configured to override security policies for known processes, files, digital signers, URLs, BTP rules, telephone numbers, and other exceptions.

Exception profiles override the security policy in scenarios such as:

  • Allow a process or a file to run on an endpoint

  • Allow a known digital signer

  • Allow access to specific URLs (via Safari) or telephone numbers

  • Disable a specific behavioral threat protection (BTP) rule

  • Import exceptions from the Cortex XSIAM support team