Forum Discussion

Haaris_Faizan's avatar
Haaris_Faizan
Brass Contributor
Mar 01, 2022

Using API to create exclusion in CM(Central Manager) Server

Hello Everyone,

We can create API to create exclusion in CM based on different parameters like ttl, engines,SensorIds, subnets. However, giving ttl is mandatory otherwise exclusion can't be created.

But I want to create permanent(Without giving any TTL) exclusion for all sensors on my side for specific servers in all sensors except Malware engine.

Maybe we can create exclusion based on certain TTL values and make that API run at specific time interval to get the time TTL updated. Can we do this in CM ? I meant to say that can we schedule it in CM?
Any thought or other ideas based on the above requirement or scenario

microsoft defender for iot

4 Replies

Sort By
  • AdiWeisberg's avatar
    AdiWeisberg
    Icon for Microsoft rankMicrosoft
    Apr 06, 2022
    Spoiler
    Hi, ttl is not mandatory, when no timeframe specified, the exclusion is always applied
    • Haaris_Faizan's avatar
      Haaris_Faizan
      Brass Contributor
      Apr 06, 2022

      AdiWeisberg 

      Can you double check because I tested multiple times but it doesnt allow.TTL is mandatory while using API.

      I wanted if TTL not mentioned it should be always

      • AdiWeisberg's avatar
        AdiWeisberg
        Icon for Microsoft rankMicrosoft
        Apr 06, 2022
        By design the parameter shouldn't be mandatory, let's take this offline to deeper check your specific use case.

Resources