ATP

[rbenson09]

is there a way to set an exclusion so that ATP does not clean or quarantine a file?

[AdithyanT · Accepted solution]

Hi @rbenson09,

Thank you for your post.

ATP does not have a way to add exclusion separately. It honors the exclusions you apply to OAS policy. So adding exclusions to OAS would ensure ATP does not scan them as well.

I sincerely hope this helps.

[msmiley]

Policy Catalog > Endpoint Security Adaptive Threat Protection > Dynamic Application Containment.  In that policy you can add exclusions. We use this extensively but we've had mixed results when excluding full paths.  In those cases you'll need to use the OAS policy exclusion.

[AdithyanT]

Hi @msmiley,

Thanks for your answer. While your answer is very much correct, it targets exclusion only for DAC - Dynamic Application Containment which is a sub component of ATP. ATP does not always put the executables under DAC as it has certain criteria to be met. Hence OAS would be the primary place of adding exclusions here.

I hope this clarifies the query! Kudos to your help!