Importing and Exporting File Exclusions in Central

I'm curious to know what these exclusions might be and if they are all genuinely required?

I can think of one way to add multiple exclusions by calling the API directly rather than using the browser.  For example, if you were creating a new threat protection policy, called Test, then go to the exclusions page and enter a couple of example exclusions, but don't save it.  Then bring up the Dev tools of the browser, switch to the network view, choose XHR as a filter and click save, You should see a PUT request to an API such as https://dzr-api-amzn-eu-west-1-9af7.api-upe.p.hmr.sophos.com/api/v1/policies/601070f265b5b93569f41267 

This put request can then be converted to a PowerShell command for example by right clicking on the request, choose Copy and then Copy as PowerShell.  Paste this into Powershell ISE or a text editor of choice, add the additional exclusions to the body, following the test ones as a guide and then execute the PS.  This will "put" the new policy.  You can then refresh the UI to see it has been added.

Hope it helps.

Sophos User930 Thank you for your tip!

This is really a way to work around the missing export import feature. But it's ugly!

I tested it with firefox and could create a new policy with a preset of exclusions. In firefox I did'nt notice a feature export as powershell but I could choose "edit and send again"

["B:\\testB\\b\\","C:\\test\\","A:\\testA\\","F:\\testF\\\\F\\","C:\\test\\testitagain\\"]

By adding more exclusions in the text values o the right side of the dev tools.

Sophos User930 said:

what these exclusions might be and if they are all genuinely required?

Well, Microsoft for example requires exceptions for many server products to have a supported environment.

This is an awesome "hack" to do bulk exclusions. You could also hit the API directly as defined in the developer docs. Endpoint API | Sophos Central APIs

You could always use the Central API to do the action: https://developer.sophos.com/docs/endpoint-v1/1/routes/settings/exclusions/scanning/post