Configure Program Blocking Security Settings (Windows Computers)

Applies To: WatchGuard Advanced EPDR This topic applies to the WatchGuard Advanced EPDR endpoint security product., WatchGuard EPDR This topic applies to the WatchGuard EPDR endpoint security product., WatchGuard EDR This topic applies to the WatchGuard EDR endpoint security product.

In a program blocking settings profile, you configure the programs that will be blocked when they attempt to run. You can only assign program blocking settings to Windows workstations and servers.

In Advanced EPDR, you can also block malware and suspicious programs. For more information, go to Configure Advanced Security Policies (Windows Computers).

To increase the security of the Windows computers on the network, you can prevent the use of programs you consider dangerous or not compatible with the work of your organization. WatchGuard Endpoint Security blocks the programs you specify every time they try to run. Do not block programs that your computers require to work properly.

You cannot block programs required by WatchGuard Endpoint Security.

To configure program blocking:

1. In WatchGuard Cloud, select Configure > Endpoints.
2. Select Settings.
3. From the left pane, select Program Blocking.
4. Select an existing security settings profile to edit, copy an existing profile, or in the upper-right corner of the window, click Add to create a new profile.
   The Add Settings or Edit Settings page opens.
5. Enter a Name and Description for the profile, if required.
6. Enable the Enable Application Blocking toggle.

7. In the text box, enter the names of the programs to block, separated by line breaks.
   For example, type spotify.exe. Wildcards are not supported.
8. In the text box, enter the MD5 or SHA-256 hash value of the executable file you want to block, separated by line breaks.
   For more information, go to Calculate the MD5 or SHA-256 of One or More Files.
9. To Notify computer users about blocked applications, enable the toggle.
   A pop-up message appears on user computers when they try to run the blocked application.
10. (Optional) In the text box, specify a custom message to notify users that WatchGuard Endpoint Security blocked a program.
11. Click Save.
12. Select the profile and assign recipients, if required.
    For more information, go to Assign a Settings Profile.

Related Topics

Manage Settings Profiles

Copy a Settings Profile

Edit a Settings Profile

Assign a Settings Profile