Manage exclusions in OneView

Trusted applications, websites, and services can be excluded from the security engine so they aren't detected. Global Administrators and Site Administrators manage exclusions by adding, editing, or deleting them in the console. See the sections below for steps to manage exclusions. 

Before adding exclusions, go through this overview to understand the types of exclusions available and what syntax is required. 

If you'd rather confirm with the ThreatDown research team if something is malicious, report a false positive instead. For more information, see Report a false positive to ThreatDown.

Configure exclusions

1. Click Configure > Exclusions.
2. In the top-right, click the Add exclusions + icon.
3. In the pop-up window, complete the following fields:
   • Values: Enter exclusions into the text box using the syntax outlined in the overview article.
   • Applies to: Select how the exclusion is applied to endpoints in the console. Global (all endpoints), specific Policies, or a single Site.
4. Click Analyze Values. Checks the entered values for syntax errors, whether they're already added in the console, and how much risk they pose to your environment. See table below for more details on validations.
5. For High-risk exclusions, a comment is required to note down why the exclusion was added.
6. Click Save. 
7. Once an exclusion is added, click the exclusion name to edit, or check the checkbox and select Actions > Delete.

The exclusion is applied to the assigned endpoints within minutes, provided the real-time WebSocket communication occurs between the endpoints and OneView. For more information, see Connection status.

Exclusion validations

Exclusion validations	Description
Type	Automatically detected exclusion type based on the value entered.
Categories	OneView protection layers affected by the exclusion. Click Edit categories to change the protection layers.
Value	Displays the exclusion value entered.
Scope	Whether the exclusion applies to all endpoints (Global) or specific policies.
Risk	Shows the level of security risk this exclusion introduces to your environment.
Actions	Click the icon to remove the exclusion.
Comment	Provide a comment to give the exclusion a unique description.