Views:

You can add the domain, file SHA-1, file SHA-256, IP address, sender address, or URL object to the Exception List.

Note
Note
TippingPoint Security Management Systems do not implement suspicious object exceptions from Trend Vision One. Individual exceptions can be added on a per-customer basis directly on TippingPoint Security Management Systems.

Procedure

  1. On the Trend Vision One console, go to Threat Intelligence → Suspicious Object Management.
  2. Click the Exception List tab.
  3. Click Add.
    The Add Exception screen appears.
  4. Select an object type or import file type from the Method drop-down list.
    • Domain: type a domain name.
      Note
      Note
      One wildcard * connected with a . is supported in the domain prefix, for example, *.example.com.
    • File SHA-1: type the SHA-1 hash value of a file.
    • File SHA-256: type the SHA-256 hash value of a file.
    • IP address: type an IP address or a hyphenated range.
      Note
      Note
      IPv4 or IPv6 addresses, address ranges, and subnet masks are supported.
    • Sender address: type an email address.
    • URL: type a URL.
      Note
      Note
      The wildcard * is supported at the beginning of the domain part, end of the path part, or in both places, for example, abc.example.com/path1/path2, *.example.com, abc.example.com/*, and *.example.com/path/*.
  5. Type a description.
  6. Click Submit.
    The object appears in the exception list.
    Trend Vision One excludes the object from the suspicious object list during the next synchronization and will not add it as a suspicious object in the future.