ZCSPM allows you to choose the assets that you want to include or exclude from security policy evaluation. Suppose you do not want to expose certain internal assets. You may then want to exclude those assets from the security policy evaluation. You may even sometimes want to exclude some assets for testing purposes and include them back.

You can choose to exclude evaluation of the assets either globally from all security policies or only from certain security policies.

When you exclude assets, ZCSPM will not evaluate the assets after the metadata configuration scan.

Excluding Assets Globally

If you exclude an asset globally, it gets excluded from evaluation for all the ZCSPM security policies. To exclude an asset globally from all the security policies:

1. Go to Asset Inventory.
2. Click Add Filter, then select Account.
3. Select the account from which you want to exclude assets, then click Done.
4. Expand the resource type from which you want to exclude assets.
5. Click Exclude Assets.
6. Select the assets you want to exclude.
7. Click Action, then click Exclude.
   See image.
   Close
8. Click Yes Please.

Excluding Assets from a Security Policy

To exclude an asset from being evaluated by a specific ZCSPM security policy:

1. Go to Cloud Security Best Practices.
2. In the Policy Summary panel, select the security policy for which you want to exclude assets from policy evaluation.
3. Click the Assets tab.
4. Select the assets you want to exclude.
5. Click Action, then click Exclude.
   See image.
   Close
6. Click Yes Please.

Including Assets

To include an asset that was excluded earlier:

1. Go to Asset Inventory.
2. Click Add Filter, then select Account.
3. Select the account for which you want to include assets, then click Done.
4. Expand the resource type under which you want to include the assets.
5. Click Exclude Assets.
6. Select the excluded assets that you want to include back.
7. Click Action, then click Include.
8. Click Yes Please.