This topic describes the exclusion types that you can select based on your Carbon Black Cloud products.

Carbon Black Cloud Endpoint Standard

Carbon Black Cloud Endpoint Standard customers have access to a single type of exclusion: the Event Reporting and Sensor Operations Exclusion. Therefore, you cannot select an exclusion type: it is the enforced exclusion type by default.

Important: Event Reporting and Sensor Operations Exclusions are most effective on Windows sensors 4.0+.

Enforced exclusion type required

Carbon Black Cloud Enterprise EDR

Carbon Black Cloud Enterprise EDR customers have access to two types of exclusions:

  • Event Reporting Exclusions
  • Event Reporting and Sensor Operations Exclusions

Select exclusion type from two options

Carbon Black Cloud Endpoint Standard and Carbon Black Cloud Enterprise EDR

Customers who have Carbon Black Cloud Endpoint Standard and Carbon Black Cloud Enterprise EDR have access to three types of exclusions:

  • Event Reporting Exclusions
  • NGAV Reporting and Sensor Operations Exclusions (applies to Carbon Black Cloud Endpoint Standard)
  • All Reporting and Sensor Operations Exclusions (applies to Carbon Black Cloud Endpoint Standard and Carbon Black Cloud Enterprise EDR)

Select exclusion type from three options