Remove a device from the watchlist

You can remove devices that are on the watchlist from the Analysis Priorities page.

  1. Log in to the ExtraHop system through https://<extrahop-hostname-or-IP-address>.
    (These steps must be completed on the ExtraHop system that is managing these shared settings.)
  2. Go to the settings for Standard Priorities.
    • On a Command appliance or Reveal(x) 360, click the System Settings icon and then click Analysis Priorities. Then, click Edit Priorities next to the ExtraHop system you want to modify.
    • On a sensor (Discover appliance), click the System Settings icon and then click Analysis Priorities.
  3. At the top of page in the Advanced Analysis Watchlist section, click View the Watchlist. The Watchlist page appears and displays all the devices on the watchlist.
  4. To remove devices from the watchlist, complete the following steps:
    1. Select the checkbox next to the device name.
    2. Click Remove Devices.
  5. Click Save.
Note:It is possible to add devices to a blocklist, based on their unique MAC addresses, by modifying the running configuration file on the ExtraHop system. Contact your ExtraHop administrator to add devices to a blocklist.
Published 2020-12-04 17:03