Jump to content

Target Groups for exclusions


j-gray

Recommended Posts

In EI Console when I'm creating an exclusion, the only available Target groups are groups from EP Console that were created by syncing Active Directory.

I'm not seeing any of the other groups from EP Console, particularly Dynamic Groups. I'd like to be able to assign exclusions by OS but currently can only do so by Active Directory org units.

Is this possible?

Link to comment
Share on other sites

  • ESET Staff

Dynamic Groups are not currently supported for assigning exclusions/rules.  But you can exclude by "SystemVersion".

This will be a numbered string that you can find on the details of a computer inside of Inspect.  You would then use this in an advanced exclusion like:

<definition>
    <process>
        <operator type="and">
            <condition component="SystemInfo" property="SystemVersion" condition="is" value="10.0.20348.643" />
            <condition component="FileItem" property="FileName" condition="is" value="cmd.exe" />
        </operator>
    </process>
</definition>

 

Link to comment
Share on other sites

Thank you for the quick response! I'll give that a try.

I thought I recalled having dynamic groups when on-prem, so thought I might be missing something now that we're in the cloud.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...