You can remove devices that are on the watchlist from the Analysis Priorities page.
Log in to the ExtraHop system through
(These steps must be completed on the console or sensor that is managing these shared settings.)
Go to the settings for Standard Priorities.
- On a console, click the System Settings icon and then click Analysis Priorities. Then, click Edit Priorities next to the sensor you want to modify.
- On a sensor, click the System Settings icon and then click Analysis Priorities.
- At the top of page in the Advanced Analysis Watchlist section, click View the Watchlist. The Watchlist page appears and displays all the devices on the watchlist.
To remove devices from the watchlist, complete the following steps:
- Select the checkbox next to the device name.
- Click Remove Devices.
- Click Save.
|It is possible to add devices to a blocklist, based on their unique MAC addresses, by modifying the running configuration file on the ExtraHop system. Contact your ExtraHop administrator to add devices to a blocklist.