The list of excluded MD5 hashes in the Exploit Guard exception policy can be enabled and disabled using the Web UI or the CLI. When it is enabled, the MD5 hashes in the list are excluded from Exploit Guard processing (both exploit detection and exploit prevention) for the host sets selected in the exception policy.
Enabling the list using the web UI
To enable the exception policy excluded MD5 hash list using the Web UI:
Log in to the Web UI as an administrator.
Access the Policies page by selecting Policies on the Admin menu.
Select the Exploit Guard tab.
In the Exceptions for Selected Host Sets section, select the Exclude MD5 hashes from Exploit Guard for the selected host sets option.
In the field below this option, specify MD5 hashes that should be excluded from Exploit Guard processing for the exception policy. See Maintaining the MD5 Hash List for the Exploit Guard Exception Policy .
Click Save.
Enabling the list using the CLI
To enable the exception policy excluded MD5 hash list using the CLI:
On the HX Server, enable CLI configuration mode:
hostname > enablehostname # configure terminalEnable the excluded MD5 hash list in the Exploit Guard exception policy:
hostname (config) # hx config agent exd exceptions whitelist MD5 enableSave your changes:
hostname (config) # write memory
Disabling the list Using the web UI
To disable the exception policy excluded MD5 hash list using the Web UI:
Log in to the Web UI as an administrator.
Access the Policies page by selecting Policies on the Admin menu.
Select the Exploit Guard tab.
In the Exceptions for Selected Host Sets section, clear the Exclude MD5 hashes from Exploit Guard for the selected host sets option.
Click Save.
Disabling the list using the CLI
To disable the exception policy excluded MD5 hash list using the CLI:
On the HX Server, enable CLI configuration mode:
hostname > enablehostname # configure terminalDisable the excluded MD5 hash list in the Exploit Guard exception policy:
hostname (config) # no hx config agent exd exceptions whitelist MD5 enableSave your changes:
hostname (config) # write memory