SonicWall Endpoint Security Administration Guide

Exclusion

By using exclusion, you can allow various known files that SES detects locally and remotely. This is particularly useful if you are experiencing false positives and you want to allow the resource or content to access your device.

To view and download the Exclusion settings

Navigate to Policy > Exclusion.

The table below shows the excluded files list in detail:

Options Description
Tenant Displays the tenant's details.
Group Displays the group's details.
Type

Displays the type of file (Hash or File path).


Name Displays the file name.
Description Displays the file description.
Value Displays the value.
Cmdline Params

Displays the command line parameters.

Status

Displays the status (Enabled or Disabled).

Updated At Displays the date and time the entry was last updated.
Created At Displays the date and time the entry was created.

To refine the search for specific issues, click on the Filter icon. It expands and you can select a combination of parameters to filter against.

You also have the options:

  1. All Related Scopes: Click drop-down to choose the below options:
    • This Scope and its ancestors
    • This scope and its descendants
  2. Table Action: Select the file and click the Table Action to choose the following actions
    • Enable Rule
    • Disable Rule
    • Delete Rule
  3. Download: Click Download to get the exclusion details in CSV file.
  4. Clear: Click Clear to refresh data.

To create the Exclusion

  1. Click + Create.
  2. Enter the Name and Description in the Base info field.
  3. Enable the Enable Rule toggle button.

  4. Select the File Mask from the drop-down under the locations section.
  5. Enter the Folder and File Name mask and the Cmd line params in their respective fields.

  6. Alternate option - Select the Hash from the drop-down.
  7. Type with the Hash value.

  8. Click Save.