Working with the Exclusions page

Working with the Exclusions page

Reduce false positives by creating exclusions to suppress alerts that originate from specific files or folders. Exclusions apply to processes that include the specified file or file path, so child processes including the file or file path are also excluded. This reduces false positives and lets you focus on alerts that can genuinely affect your managed devices.

When you create an exclusion, alerts are not displayed and detections are not mitigated on the excluded process. Before you create an exclusion, make sure the alert is a false positive.

Once you've created exclusions, you can sort the list and filter it. You can also remove items you don't want on the list.

To add an exclusion, see Adding Threats to Exclusions.

ExclusionsPageNumber.png

 

  1. Click to open Barracuda Assistant. For more information, see Barracuda Assistant.

  2. Click to add or edit a filter for the table. See Filtering the Exclusions Page.

  3. Click to clear the filters from the table. See Filtering the Exclusions Page.

  4. Click to create a new exclusion. See Adding Threats to Exclusions.

  5. Click to change the columns displayed in the Managed Endpoint Exclusions table.

  6. Displays a list of exclusions. Click an exclusion to:

  7. Displays the date the exclusion was last updated.

  8. Displays the path of the exclusion.

  9. Displays the operating system of the exclusion.

  10. Displays the type of exclusion. Types are Path, Hash, and Certificate.

  11. Displays the exclusion value, generally the path.

  12. Displays a description if the exclusion includes one.