Skip to content

Add threat exclusions

You can exclude hosts, networks, IP addresses, domains, or URLs from Active threat response scanning.

Exclusions apply to both MDR threat feeds and Sophos X-ops threat feeds.

  • Host and network exclusions: Click Add new item and select the hosts and networks you want to exclude. If no definition exists, click Add to add a new one.
  • Threat exclusions: Enter the IP addresses, domains, or URLs you want to exclude and click Add Add button.. You can enter a maximum of 128 characters.


You may expose your network to severe risks if you add exclusions.