Configuring the Behavior Monitoring Exception List

Behavior Monitoring exceptions include an Approved Program List and a Blocked Program List that the Security Agent does not monitor. Programs in the Approved Programs List can be started even if they violate a monitored change, while programs in the Blocked Program List can never be started.

  • Approved Program List: The Security Agent allows all programs in the Approved Program List to pass Behavior Monitoring scanning

  • Blocked Program List: The Security Agent blocks all programs in the Blocked Program List.

  1. Go to the Configure Policy screen by performing one of the following:

    • Classic Mode: Go to SECURITY AGENTS and select a group. Click > Configure Policy.

    • Advanced Mode: Go to POLICIES > Policy Management. Click Add or click an existing policy.

  2. Click Windows.
  3. Go to Scan Exclusions.
  4. In the Behavior Monitoring section, click a tab and configure the required exceptions.
  5. To add an exception:
    1. Click Add.
    2. Specify the approved or blocked file path.

      Exception

      Description

      Examples
      • Approved Program List
      • Blocked Program List
      • C:\Program Files\MSN Messenger\MSVS.exe
      • C:\Folder\*.exe
    3. Click Add.
  6. To edit an exception:
    1. Click the file path in the Allowed/Blocked Program List.
    2. Update the exception.
    3. Press the ENTER key to save the changes.
  7. To delete an exception, point to the exception and click in the last column of the list.
  8. Click Save.
Parent topic: Configuring Scan Exclusions