AnsweredAssumed Answered

Exclude files from emulation

Question asked by Eric Lindsey on Sep 20, 2018
Latest reply on Sep 20, 2018 by Vladimir Yakovlev

We have 1000s of pcs going to a windows update site to download a .cab file.  It crashed our Threat Emulation blade.  We would like to exclude windows updates from threat emulation. I tried making an exclusion rule set to detect only but can not get the rule to match with the traffic.  What would be the correct url string in our application /Site group to bypass all windowsupdate.com files?  We have 77.30 take 302

Outcomes