To display the
Agent Events screen, go to in the navigation at the top of the web console.
This screen displays a list of events related to applications not in the Approved
List on agents managed by Safe Lock Intelligent Manager.
When Lockdown is off and a file not on an agent's Approved List attempts to run or
make changes to the endpoint, Safe Lock logs the event but allows the file to run.
When Lockdown is on and a file not on an agent's Approved List attempts to run or
make changes to the endpoint, Safe Lock stops the file and may prompt the user for
the appropriate action. Event logs contain information from managed agents about files
not in the Approved List and any action taken.
You can take the following actions on files not in the Approved List when Lockdown
is on:
-
Add to Approved List
: Prevent the file from executing for this instance but add the file to the agent's
Approved List.
-
Ignore
: Prevent the file from executing but do not move or change the file.
-
Quarantine
: Prevent the file from executing and hold the file in quarantine for later analysis.
-
Delete
: Prevent the file from executing and delete the file.
