How to create exclusions on Capture client

This article will guide the Administrator on creating exclusions tenant-wide.

Capture client lets you exclude variants that could be False positives or causing issues while legitimate downloads.

There are 5 different ways you can create exclusions on the Capture Client console and apply it across the entire tenant network.

1. Hashes: You can exclude the SHA 1 hashes of the files. MD5 and SHA 256 hashes are not accepted while creating an exclusion
2. Paths: you can exclude the path of file that could be excluded
3. Signer Identity: You can exclude a particular certificate if the certificate turns out to be a false positive and is blocked as a Threat under Capture client. Just add the certificate ID and appropriate OS to create the exclusion.
4. File types: lets you exclude any file types eg:exe, pdf ( Available only for Windows OS for now)
5. Browsers:lets you exclude the entire browser ( Available only for Windows OS for now)

To Create an Exclusion:

• Log into https://captureclient-36.sonicwall.com  with your MysonicWall credentials.
  
  
• Navigate to Policies >Exclusions
  
  
• Select the Required Tenant you want to apply the Exclusions to as below:
  
  

• Click on Add button '+' on the top right  choosing the appropriate exclusions types .

• OS : lets you choose the operating system on which the exclusion needs to be applied on- Windows/Mac OS
• SHA1 Hash :Enter the Hash Value.
• Description: A friendly name to identify the exclusion.
  
  
• Click Add to Save the exclusion.