[Latest KB's] Sophos Central: Update on Exploit Mitigation exclusions

Disclaimer: This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment.

Special thanks to Mariam Shaikh for creating this Content!

Overview

Exploit Mitigation exclusions that were available under Global Exclusions will also be available for Sophos Central Endpoint and Sophos Central Server Threat Protection Policies.
 

What to do

  1. In Sophos Central, access Endpoint Protection | Policies or Server Protection | Policies.
  2. Edit the Threat Protection Policy you want to apply the exclusion against.
  3. Go to Settings | Exclusions | Add Exclusions
  4. From the drop-down, select Exploit Mitigation (Windows).

Exclusion options in Threat Protection policies prior to the update:

Threat Protection policy options after the update:


The functionality and usage of the feature are the same as the Exploit Mitigation exclusion under Global exclusions.
This provides an option to apply the exclusion only to the intended devices/users instead of all devices/users.

Related Information/Articles:

How to exclude applications from Sophos' exploit mitigation or exploit prevention feature

Reference: https://support.sophos.com/support/s/article/KB-000041314?language=en_US

Have an idea or suggestion regarding our Documentation, Knowledgebase, or Videos? Please visit our User Assistance forum on the Community to share your idea!



Added Disclaimer
[edited by: GlennSen at 10:00 AM (GMT -7) on 5 Apr 2023]