Allow Lists

The Allow Lists screen is located under the RESPONSE section in the portal. This screen provides an interface to manage and view whitelisted IP addresses and labels, ensuring that trusted entities are not flagged by the system.

The Allow Lists screen features a table with the following columns:

• A checkbox dropdown for all, checked, and unchecked values for filtering
• Name / Desc: The name and description associated with the whitelisted entry
• IP (CIDR)/ Labels: The IP address (in CIDR notation) or labels of the entity to be included in the allow list

By maintaining an Allow List, you can exclude trusted IP addresses and labels from being detected as potential threats, reducing false positives and allowing your security team to focus on actual risks.