After determining that a blocked object or sender is no longer a risk, you can remove the object from the applicable blocked list using the Response Management app.
This task is supported by the following services:
-
Apex One as a Service
-
Windows agent
-
-
Cloud App Security
-
Deep Discovery Inspector
-
Deep Security Software
Procedure
- In the Response Management app, find the blocked object
and click the options button (
) at the right of the row. - Click Remove from Blocked List.The Remove from Blocked List Task screen appears.
- Confirm the targets of the response.
- (Optional) Specify a Description for the response or event.
- Click Create.Trend Vision One creates the task and displays the current task status in Response Management.
- Monitor the task status.
- Open Response Management.
- (Optional) Locate the task using the Search field or by selecting Remove from Block List from the Action drop-down list.
- View the task status.
-
In progress (
): Trend Vision One sent the command
and is waiting for a response. -
Successful (
): The command was successfully
executed. -
Unsuccessful (
): An error or time-out occurred when attempting to send
the command to the managing server, the agent is offline for more than 24 hours, or
the command execution timed out.
Important
The Task Status indicates whether the managing server was able to successfully receive the command but does not necessarily mean that the target servers already synchronized the User-Defined Suspicious Objects List to all related products. -