How to disable alerts, add exclusions and view blocked items with Advanced EPDR/EDR

+34 900 840 407

support@cytomic.ai

How to disable alerts, add exclusions and view the detail of blocked items with Advanced EPDR/EDR

Related Products_

Advanced EPDR
Advanced EDR

This article explains how to disable sending email alerts whenever Advanced EPDR/EDR blocks unknown items and where you can find extended information on the blocked item.

How to disable email alerts for blocked items

If you wish to stop receiving email alerts altogether every time an item is blocked, go to Settings, select My alerts from the left menu and disable the checkbox A program that is being classified is blocked, for example. You can select any other alert that you do not wish to receive from the given options.

How to view information related to the blocked items

To know the detail of the blocked item, follow the steps below:

Click the Currently blocked items being classified activity dashboard at the Advanced EPDR/EDR web console.
Locate the specific item by name of the application or affected computer and click on it.

Should this item be necessary for the activity of your company, you may, under your responsibility, unblock it until its classification is completed. You can do so by clicking the element and selecting option Do not block again.

NOTE: If the blocked item is not displayed on the list of blocked items, it is likely that the item has already been classified. Access the History option to see the detail of items classified as goodware or malware. Please note that the earliest record dates back from 10th April 2016.

In the case of classification of blocked items as malware, you can also check the detail from the Malicious programs or Potentially Unwanted Programs activity dashboards.

Additional information

For further information on Advanced EPDR/EDR, check the online help and the Advanced Administration Guide available from the web console.

Hardware Requirements_

Processor: CPU with x86 or x64 architecture and with support of at least SSE2
RAM: 1 Gbyte
Free space in disk for the installation: 650 Mbytes

Requirements for Windows Exchange Platforms_

Supported operating systems

Exchange 2003: Windows Server 2003 32-bits SP2+ and Windows Server 2003 R2 32-bits
Exchange 2007: Windows Server 2003 64-bits SP2+, Windows Server 2003 R2 64-bits, Windows 2008 64-bits and Windows 2008 R2
Exchange 2010: Windows 2008 64-bits and Windows 2008 R2
Exchange 2013: Windows Server 2012 y Windows Server 2012 R2
Exchange 2016: Windows Server 2012, Windows Server 2012 R2 and Windows Server 2016.
Exchange 2019: Windows Server 2012, Windows Server 2012 R2, Windows Server 2016 and Windows Server 2019.

Hardware and software requirements

The hardware requirements to install the protection on Exchange servers are the ones determined by the Exchange Server:

Exchange 2003: http://technet.microsoft.com/es-es/library/cc164322(v=exchg.65).aspx
Exchange 2007: http://technet.microsoft.com/es-es/library/aa996719(v=exchg.80).aspx
Exchange 2010: http://technet.microsoft.com/es-es/library/aa996719(v=exchg.141).aspx
Exchange 2013: http://technet.microsoft.com/es-es/library/aa996719(v=exchg.150).aspx
Exchange 2016: https://technet.microsoft.com/es-es/library/aa996719(v=exchg.160).aspx

Exchange versions supported

Microsoft Exchange Server 2003 Standard and Enterprise (SP1 / SP2)
Microsoft Exchange Server 2007 Standard and Enterprise (SP0 / SP1 / SP2 / SP3)
Microsoft Exchange Server 2007 included in Windows SBS 2008
Microsoft Exchange Server 2010 Standard and Enterprise (SP0 / SP1 / SP2)
Microsoft Exchange Server 2010 included and Windows SBS 2011
Microsoft Exchange Server 2013 Standard and Enterprise
Microsoft Exchange Server 2016 Standard and Enterprise
Microsoft Exchange Server 2019 Standard and Enterprise

+34 900 840 407

support@cytomic.ai

Installation requirements of products based on Cytomic Platform for Windows