Views:

Set exclusions to prevent specific response actions from affecting groups of selected endpoints.

For some critical devices, exclusions from certain response actions may be necessary to keep traffic flowing or important processes running. Response action exclusions for an endpoint or group of endpoints apply no matter where in the Trend Vision One console a response action is triggered.

Procedure

  1. In the Settings tab of Response Management, click Edit settings under Exclude specified endpoints from response actions.
  2. Choose a response action for exclusion from the drop-down menu.
  3. Click the edit (modify-connector.jpg) icon under Excluded endpoints to select endpoints to exclude from the action.
    1. Select individual endpoints or all endpoints from the list of available endpoints.
    2. Click Move to Selected Endpoints
      The endpoints move to the Selected Endpoints tab.
    3. Click Save to save the selected endpoints as a group of excluded endpoints.
      Note
      Note
      You may select a maximum of 2000 endpoints per exclusion.
  4. To copy the group of endpoints to a new response action exclusion, click the copy (duplicate.jpg) icon and choose a new response action.
  5. To add a new exclusion with a new group of excluded endpoints, click Add Exclusion.
    Note
    Note
    You may add up to 6 exclusions.
  6. Choose whether to activate the exclusions after saving the setting configuration.
  7. Click Save to save and return to Response Management settings.