Remove Unknown Programs from the Blocked File List

Applies To: WatchGuard EPDR, WatchGuard EDR

On the Status > Security dashboard, unknown processes show in the Currently blocked programs being classified panel tile until WatchGuard EPDR or WatchGuard EDR has analyzed them. Sometimes it is not possible to complete the analysis because the file is too large or no longer available on the user computer. When this happens, unknown files continue to display in the Currently blocked programs being classified tile.

You can delete a blocked program that is in the process of classification to simplify the list. Internally, WatchGuard Endpoint Security continues to consider these items as unknown. If an attempt is made to run them again, they will reappear in the Currently blocked programs being classified tile and list.

To remove unknown files from the blocked file tile and list:

  1. From the top navigation bar, select Status.
  2. From the left pane, select Security.
  3. Click the Currently blocked programs being classified tile.
    The Currently blocked programs being classified list opens.
  4. In the list, select the check box for the files you want to remove from the list.
  5. In the toolbar, click Delete.
    A confirmation dialog box opens.
  6. Click Delete.
    The deleted items appear in the History of blocked programs list with the Action field updates to show Deleted from list. These files cannot be unblocked.

See Also

WatchGuard EPDR Security Dashboard

WatchGuard EDR Security Dashboard