Manage Security Services > Data Loss Prevention > Unlock a File Locked by DLP

Unlock a File Locked by DLP

WatchGuard System Manager provides an executable file to unlock attachments locked by DLP or Gateway AV. When DLP locks a file, the locked file remains attached to the email message, but the file has an appended file extension of .clk. So, for example, if the original file attachment name was, the locked file attachment name is To unlock a file, you must save the attached .clk file to the computer where you have installed WatchGuard System Manager.

The executable file utility to unlock a file is located in:

C:\Program Files\WatchGuard\wsm11\bin\unlock.exe

For x64-based systems, the location is:


To open a locked file:

  1. Save the file attachment to a location on the computer where WatchGuard System Manager is installed. It may be easiest if you copy the file to the same location as the unlock.exe utility.
  2. Open a command prompt as an administrator. You can do this by right-clicking the command prompt shortcut in Windows.
  3. Type Unlock <path and filename of locked file>.

For example, if the locked file is called, and it is located in the root directory (C:\), you type:

unlock c:\

The utility saves the unlocked file, without the .clk file extension to the local directory. In this example, the utility writes the unlocked file,, to the C:\Program Files\WatchGuard\wsm11\bin\ directory.

After you unlock the file, you can use the appropriate application to examine the content of the attachment.

Give Us Feedback     Get Support     All Product Documentation     Technical Search