Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/21.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=active-threat-response-add-threat-exclusions

Add threat exclusions

You can exclude hosts, networks, IP addresses, domains, or URLs from Active threat response scanning.

Exclusions apply to all the threat feed modules in Active threat response.

To add an exclusion, do as follows:

  1. Go to Active threat response and click Add threat exclusions.
  2. Under Host and network exclusions, click Add new item and select the hosts and networks you want to exclude.

  3. Under Threat exclusions, enter the IP addresses, domains, or URLs you want to exclude and click Add Add button..

    You can enter a maximum of 128 characters.

  4. Click Apply.

Warning

You may expose your network to severe risks if you add exclusions.