It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda XDR

Filtering the Allow List Page

  • Last updated on

You can filter the Allow List to concentrate on the Allow-listed threats you most want to see. You can filter out the data you don't want to see to find the data you're interested in more easily.

Multiple filters can be active at any time.

Filters are active until you remove them, even if you navigate to another page. When you return to the Security Overview, the filter will still be in place.

You can also refresh the Allow List page manually. See Filtering the Allow List Page#To refresh the Allow List page.

The difference between filters and quick filters

You can create filters two ways, by:

  • Adding a filter

  • Creating a quick filter

Adding a filter lets you select a wider variety of subjects to filter on, including account, date range, description, file name, file path, hash, and keyword. Adding a filter also lets you create exclusion filters. For more information, see the Exclusion filter section below.

Creating a quick filter is faster, but you can only filter on values in an existing Allow List item. For example, if you had an existing Allow List item with the File Name Malware.exe, you could create a quick filter on the File Name Malware.exe

The available fields are:

  • Account

  • Date Range

  • Description

  • File Name

  • File Path

  • Hash

  • Keyword

You can use a combination of filters and quick filters.

Exclusion filters

You can also create filters that exclude the values that you choose, so everything is displayed except for the chosen values. For example, if you select a date range of one month and then negate that condition so that all data from earlier than one month are displayed.

Filter operators

When you add filters, you have the choice to use an And or Or operator. The operator is applied to all the filters you add.

Operator

Definition

And

Data has to fulfill all filters to be displayed.

Or

Data only has to fulfill one filter to be displayed.

To create and apply a filter for the Allow List page
  1. In Barracuda XDR Dashboard, click Administration > Allow List.

  2. Click Add Filter.

    AllowListAddFilter.png

  3. In Field, select an option.

  4. In Value, select an option.

  5. Optionally, if you want to exclude the values you chose in the Field and Value fields, enable the Negate this condition check box.

  6. Click Apply Changes.

  7. Repeat steps 2-6 until you have added all the filters you want.

  8. Optionally, in the Filters area, click one of the following filter operators:

    • And

    • Or

To create a quick filter from an allow listed threat
  1. In Barracuda XDR Dashboard, click Administration > Allow List.

  2. Click the row of an allow listed threat in the table.

  3. In the Item Details pop up, hover your cursor over one of the following rows:

    • Account 

    • File Name 

    • File Path 

    • Hash 

    • Description 

  4. Click the magnifying glassmagnifyingGlass.pngin the row of the field you want to filter on.

To edit a filter
  1. In Barracuda XDR Dashboard, click Administration > Allow List.

  2. Click the filter you want to edit.

  3. In Field, select an option.

  4. In Value, select an option.

  5. Optionally, if you want to exclude the values you chose in the Field and Value fields, enable the Negate this condition check box.

  6. Click Apply Changes.

To remove a filter
  1. In Barracuda XDR Dashboard, click Administration > Allow List.

  2. Click the filter you want to remove.

  3. Click Remove.

To remove all filters
  1. In Barracuda XDR Dashboard, click Administration > Allow List.

  2. Click Clear All.

    AllowListClearAll.png