Editing security event exceptions

1. Click the Edit Exception button in the security event row for the exception you want to modify. The following window displays:

   

2. Modify the Collector Groups, Destinations and Users to which the exception applies and the pairs of rules and processes that operate together to define an exception in the Triggered Rules area, as needed. For more details, see Defining a security event as an exception.

   For a multi-organization FortiEDR system, an Administrator can also specify whether the exception applies to all organizations. The All organizations option applies the exception to all organizations, regardless of whether or not the security event already occurred.

3. Click Save Changes.