ATP 3.x or later do not have a function to search the Blacklist / Whitelist policy page

book

Article ID: 171501

calendar_today

Updated On:

Products

Endpoint Detection and Response Advanced Threat Protection Platform

Issue/Introduction

On previous versions of the Advanced Threat Protection software, there was a field for searching the blacklist or whitelist by text input. After the upgrade to ATP 3.0, 3.0.5 or 3.1, you no longer have this option, you can only apply the predefined filters.

Cause

The upgrade to the ATP UI for 3.0 and newer required a lot of user interface code changes. This function is no longer available.

Resolution

The hash values are not fully visible in the interface, but they are searchable by using your browser's built-in Find option. You will need to scroll to the bottom of the list for all of the hashes to be shown, then perform the search.

 

ATP version 3.2 has added API functions to manage the blacklist and whitelist. Please see the ATP 3.2 API Guide here:

https://apidocs.symantec.com/home/ATP_3.2/

Attachments