Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/20.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=active-threat-response-add-threat-exclusions

Add threat exclusions

You can exclude hosts, networks, IP addresses, domains, or URLs from Active threat response scanning.

Exclusions apply to both MDR threat feeds and Sophos X-ops threat feeds.

  • Host and network exclusions: Click Add new item and select the hosts and networks you want to exclude. If no definition exists, click Add to add a new one.
  • Threat exclusions: Enter the IP addresses, domains, or URLs you want to exclude and click Add Add button.. You can enter a maximum of 128 characters.

Warning

You may expose your network to severe risks if you add exclusions.