topic Re: Anti-Malware Exception in Endpoint

Anti-Malware Exception

Mattia_Marini — Mon, 05 Aug 2019 13:53:28 GMT

Hi All,

i'm tryng to add a local exception for a file present only on one client; is it possible without add the exception on the Smart Endpoint for all clients but locally directly on the client?

Thanks

Anti-Malware Exception

G_W_Albrecht — Mon, 05 Aug 2019 14:44:45 GMT

I can not see how this could work anyway - you will need an EPSS or SMS to define malware exceptions ! See:

sk152772 - Learning mode to best practice methodology
sk153713 - SandBlast Agent Learning mode to best practice
sk153714 - SandBlast Agent Learning Mode Configuration
sk154052 - SandBlast Agent Best Practice Configuration
How to exclude? See sk128472 - SandBlast Agent (Forensics, Anti-Ransomware, Anti-Bot, Threat Emulation) - Exclusions

Re: Anti-Malware Exception

PhoneBoy — Mon, 05 Aug 2019 23:15:10 GMT

Pretty sure you can define exceptions for a specific group of clients.
In this case, you'd just put one PC in that group.
You cannot define exceptions on the local PC itself as that would defeat the purpose of central management.