SentinelOne (S1): Exclusions for Conflicts with Software

Description

You must be logged into your SentinelOne Management portal at the following URL to view SentinelOne linked articles.

 

When adding Exclusions, make sure you are viewing the desired scope in your S1 console.

  • Where do you want to add the exclusions?
    • Adding at your “Account” scope will apply the exclusions to ALL Sites and Groups.
      • image-20240917-155504.png
    • Adding at a specific “Site” scope will apply the exclusions to that Site and all Groups under that Site.
      • image-20240917-155546.png
    • Adding at a specific “Group” scope will apply the exclusions to that Group of devices only.
      • image-20240917-155639.png
Using the S1 Exclusions Catalog

Not all programs are included in the S1 Exclusions Catalog.

  • Some of the more common programs with known conflicts are listed.

When logged into your S1 Management Console

  1. Select the the Sentinels tab on the left hand side.
  2. Select Exclusions from the top list of options.
  3. Select the purple New Exclusion button.
  4. Select the option to Add from Exclusions Catalog from the drop down.

image-20240917-154446.png

  1. Search for the desired application.

image-20240917-154738.png

  1. Select the application if it is in the catalog.

image-20240917-154920.png

  1. Select the checkboxes of the desired exclusions to add.
  2. Click the purple Apply Exclusions button.
    1. This will add the selected exclusions to the “scope” you are currently viewing.

image-20240917-155118.png

 

 

Additional Information on adding exclusions is available from SentinelOne at the following link:

Related Articles

  • MSS Managed Firewall Best Practice Configuration
    Read More
  • NDR: Integration Guide
    Read More
  • NDR: Windows Server Agent
    Read More
not finding your answers?