SEDR does not have a function to search the Allow list policy page

Products

• Endpoint Detection and Response
• Advanced Threat Protection Platform

Issue/Introduction

On previous versions of the Advanced Threat Protection software, there was a field for searching the blacklist or whitelist by text input. After the upgrade to Symantec Endpoint Detection and Response, you no longer have this option, you can only apply the predefined filters.

Cause

This function is no longer available.

Resolution

The hash values are not fully visible in the interface, but they are searchable by using your browser's built-in Find option. You will need to scroll to the bottom of the list for all of the hashes to be shown, then perform the search.

 

ATP version 3.2 has added API functions to manage the blacklist and whitelist. Please see the API Guide here:

https://apidocs.securitycloud.symantec.com/#/