Adding an exclusion from a network isolation rule

To add an exclusion to a previously created network isolation rule:

1. Select the Endpoint Agents section in the window of the application web interface.

   This opens the table of hosts.

2. Select the isolated host for which you want to create an exclusion from the network isolation rule.

   This opens a window containing information about the host.

3. Click the Add to exclusions link to expand the Exclusions for the host isolation rule settings group.
4. Select the direction of network traffic that must not be blocked:
   • Incoming/Outgoing.
   • Incoming.
   • Outgoing.
5. In the IP field, enter the IP address whose network traffic must not be blocked.
6. If you select Incoming or Outgoing, in the Ports field, enter the connection ports.
7. If you want to add more than one exclusion, click Add and repeat the steps to fill in the Traffic direction, IP and Ports fields. Click Save.

The network isolation rule exclusion will be added.

If you are using Kaspersky Endpoint Agent for Windows in the role of the Endpoint Agent component, you can use a proxy server for the connection of Kaspersky Endpoint Agent with Kaspersky Anti Targeted Attack Platform. When you add this proxy server to exclusions, network resources that can be accessed through the proxy server are also added to exclusions. If network resources that are accessed through the proxy server are added to exclusions, but the proxy server itself is not, such exclusions do not work.

Users with the Security auditor and Security officer roles cannot create exclusions from a network isolation rule.