Views:

The Lockdown Exclusions allows users to define trusted certificates, trusted hash values, exception paths, and write protecion list. The trusted certificates defined by users will be bypassed during scanning and will not be blocked by Application Lockdown. Meanwhile, the trusted hash values, exception paths, and write protecion allows users to configure lockdown exclusion settings for the Approved List.

  1. Go to Agents > All.
  2. Navigate to the target agent or group, and then go to its Policy page.
    Note:

    For more detailed procedures of how to go to the Policy page, refer to Go to the Policy Screen.

  3. Scroll down and go to the Exclusions section.
  4. Configure the Exclusions by Import/Export Exclusions for Trusted Certificates and Trusted Hash Values:
  5. Manually add lockdown exclusion lists for Trusted Hash Values, Exception Paths, and Write Protection:
    • For adding exception paths:
      1. Click the +Add button, and then a pop-up window appears.

      2. Select among Folder, File, or Regular Expression and input the required information in the corresponding text field.

        Note:

        Supports only the real path and hardlink path.

      3. Click Add to complete adding the exception paths for the Approved List.

    • For editing existing exception paths:
      1. Find the exception path to be edited and click the corresponding Edit icon under the Actions header.

      2. A pop-up window appears. Select among Folder, File, or Regular Expression and edit in the corresponding text field.

      3. Click Save to complete editing the exception paths for the Approved List.

    • For deleting multiple existing exception paths:

      1. Click the checkboxes next to the existing exception paths.

      2. Click the Delete button next to the +Add button.

      3. A warning message window appears. Click Confirm to delete the selected items.

    • For deleting single existing exception path:

      1. Find the exception path to be deleted and click the corresponding Delete icon under the Actions header.

      2. A warning message window appears. Click Confirm to delete the selected item.