Detection Exceptions Parent topic

Detection Exceptions contains a list of exception criteria. Detections that match any of the enabled criteria are not recorded in the logs.
Related information

Configuring Detection Exceptions

Procedure

  1. Go to Administration → Monitoring / Scanning → Detection Exceptions.
  2. (Optional) Add a detection exception.
    1. Click Add.
      The Add Exception window appears.
    2. Select the Status.
    • Enabled: enable the detection exception.
    • Disabled: disable the detection exception.
    1. (Optional) For Description, type your own description about the detection exception.
    2. For Exception criteria, specify the criteria for the detection exception. Click + to add additional criteria.
      Note
      Note
      Use TAB or ENTER as the delimiter to specify multiple values.
      Use the contains operator to match a partial string, use the in operator to match an exact string, or use the end with operator to match a domain name. Deep Discovery Inspector uses case-insensitive string matching.
      Examples:
      • Host Name - In - abc,DEF
        This criteria matches any host name that is exactly (case-insensitive) "abc" or "def".
        • "abc" is matched
        • "deF" is matched
        • "abcxyz" is not matched
        • "xyzdEf" is not matched
      • Host Name - Contains - abc,DEF
        This criteria matches any host name that contains (case-insensitive) "abc" or "def" in any part of the host name.
        • "abc" is matched
        • "deF" is matched
        • "abcxyz" is matched
        • "xyzdEf" is matched
      • Domain - End with - trendmicro.com
        This criteria matches any domain that ends with (case-insensitive) "trendmicro.com"
        • "www.trendmicro.com" is matched
        • "www.NOTrendmicro.com" is matched
        • "www.trendmicro.com.tw" is not matched
    3. Click Add.
      The Add Exception window closes.
    4. Click Save.
  3. (Optional) Delete one or more detection exceptions.
    1. Select each checkbox next to the detection exceptions that you want to delete.
    2. Click Delete.
    3. Click Save.
  4. (Optional) Click Export All to save a file containing all the detection exceptions criteria.
  5. (Optional) Import detection exceptions.
    WARNING
    WARNING
    Importing detection exceptions replaces all current detection exceptions.
    Trend Micro recommends that you first create a backup of your current detection exceptions by first using the Export All feature.
    1. Click Import.
      The Import to Detection Exceptions window appears.
    2. Select a file containing detection exceptions criteria.
    3. Click Import and Replace.
  6. (Optional) Edit a detection exception.
    1. Click the icon in the Edit column next to the item that you want to edit.
      The Edit Exception window appears.
    2. Edit the detection exception.
    3. Click Save.
      The Edit Exception window closes.
    4. Click Save.
  7. (Optional) Enable or disable a detection exception.
    1. Click the icon in the Status column to switch the status.
    2. Click Save.