Managing Defender Exclusions
B
Bart Boryczko
With the addition of the new Managed Exclusions in the web ui, simply adding an exclusion to a specific agent has become unintuitive. When navigating to the Agent > Antivirus > Policy > Configure, I'm met with a link to a whole another page, which does not have an obvious option to add a single exclusion to a single host. In the effort to add a cool new feature, you have somewhat crippled an existing feature. I discovered this while on a call with a customer, and I didn't have time to properly explore all the nooks and crannies of the portal, when I didn't find the option I needed where I expected it to be. I had to reach out to your help via chat, somewhat embarrassingly. So please rethink the new design and make it a little easier for us to manage.
T
Tommy Haggerty
I also just got finished with a lengthy conversation with chat support on the new interface and thought I would add a few more sticking points to the list.
- The Latest Exclusion Activity has lots of information but no clear indication what any of it means. What are the different icons for?
- There are Exclusions and Allowed Exclusions lists. It seems the Allowed Exclusions are meant for manually approved Risky exclusions. But the others are the same exclusions that I have added in the Manage Exclusion Settings page. So why are they in both places? Why not just have the risky exclusions show up on the "exclusions" tab if they need to be manually approved?
- When you overhaul a whole process with a new dashboard and new method of doing things a recording via YouTube, or webinar, etc goes a long way in explaining the new features as they are intended. At a minimum an email or blog link with the change log would be nice.
Thanks for the efforts!
J
Joel DeTeves
I'm sure you've heard this before but the new Exclusions feature sucks. It doesn't work half the time.
There is also no way to see whether an already-created exclusion is applied at the account, user or agent level.
There's no way to navigate to the exclusions page without drilling down through configure -> clicking on exclusions -> clicking on the link that says "exclusions have moved".
To add insult to injury the new "allowed exclusions" thing is confusing and broke a bunch of already working exclusions causing all hell to break loose when it was pushed out. This feature feels like it's in alpha and should have been opt-in.
T
Tommy Haggerty
Joel DeTeves We had the same frustration navigating to the board. We did discover by accident that if you click on the "Managed Antivirus Exclusions" (the donut chart) on the dashboard it will take you there in 1 click. Not super intuitive, but it is a way to get there in 1 click.
Russ Bashaw - Huntress
Thanks for the feedback Bart! We agree with you and are looking to bring this back with an improved experience.