Creating and Managing Exclusions

You can exclude URLs and sessions—based on criteria in their requests or responses—from being crawled and audited. Excluding URLs means that the sensor will not examine the specified URL or host for links to other resources. Excluding sessions means that sensor will not process the sessions that meet the exclusion criteria.

To exclude these items from your scan, you must create a list of Basic Exclusions. Each exclusion in the list identifies one or more targets in which the criteria for exclusion is found.

Note: You can add multiple targets to each entry in the Basic Exclusions list.

Creating Exclusions

To create one or more exclusions:

  1. Under Basic Exclusions on the Details page, click CREATE.

    The MANAGE EXCLUSIONS dialog box opens.

  2. Type a name for the exclusion in the Name box.

  3. From the Target list, select one of the following target types to configure for exclusion:

    • Extension - Excludes file extensions that match the exclusion criteria

    • Host - Excludes hosts that match the exclusion criteria

    • Post parameter - Excludes sessions with a POST request parameter that matches the exclusion criteria

    • Query parameter - Excludes sessions with a query parameter in the URL that matches the exclusion criteria

    • Request – Excludes sessions with a request that matches the exclusion criteria

    • Response – Excludes sessions with a response that matches the exclusion criteria

    • Response header - Excludes sessions with a response header that matches the exclusion criteria

    • Status code - Excludes sessions with a response status code that match the exclusion criteria

    • URL – Excludes URLs that match the exclusion criteria

  4. Type a name for the target in the Name box.

  5. Select one of the following types of exclusion for the target from the Type list:

    • Matches Regex – Matches the regular expression you specify in the String box

    • Matches Regex extension – Matches the regular expression extension you specify in the String box

    • Matches - Matches the specified criteria in the String box

    • Contains – Contains the text string you specify in the String box

  6. Type the string to match in the String box.

    For examples of Target, Type, and String settings, see Exclusion Examples.

  7. Do one of the following:

    • To save the exclusion to the list, click the check mark icon ().

      The exclusion is added to the list. To create another exclusion, return to Step 2.

    • To clear the fields and start over, click the retry icon () and return to Step 2.

  8. When the list of exclusions is complete, click OK.

Exclusion Examples

The following table provides examples of exclusions.

To... Create the following exclusion...

Ensure that you never send requests to any resource at Microsoft.com

URL contains Microsoft.com

Exclude the following directories:

http://www.test.com/W3SVC55/
http://www.test.com/W3SVC5/
http://www.test.com/W3SVC550/

URL matches regex /W3SVC[0-9]*/

Ensure that you never process session responses with 404 Not Found

Response contains Not Found

For more information about creating exclusions, see Understanding and Creating Inclusive Exclusions.

Editing or Removing Exclusions

To edit or remove an entry in the Basic Exclusions list:

  1. Select an entry from the Basic Exclusions list.

  2. Do one of the following:

    • To edit the exclusion settings, click MANAGE.

      The MANAGE EXCLUSIONS dialog box opens. For more information about using this dialog box, see Creating Exclusions.

    • To remove the host from the allowed hosts list, click REMOVE.

See Also

Configuring Scan Details