Configuring Malware Behavior Blocking, Event Monitoring, and the Exception List

  1. Select Enable Malware Behavior Blocking.
  2. Configure Event Monitoring settings.
    1. Select Enable Event Monitoring.
    2. Choose the system events to monitor and select an action for each of the selected events. For information about monitored system events and actions, see Event Monitoring.
  3. Configure the exception list.
    1. Under Enter Program Full Path, type the full path of the program to approve or block. Separate multiple entries with semicolons (;). The exception list supports wildcards and UNC paths.
    2. Click Approve Programs or Block Programs.
    3. To remove a blocked or approved program from the list, click the trash bin icon () next to the program.

      OfficeScan accepts a maximum of 100 approved programs and 100 blocked programs.