Manage Blocked Threats

Applies To: WatchGuard Advanced EPDR This topic applies to the WatchGuard Advanced EPDR endpoint security product., WatchGuard EPDR This topic applies to the WatchGuard EPDR endpoint security product., WatchGuard EDR This topic applies to the WatchGuard EDR endpoint security product., WatchGuard EPP This topic applies to the WatchGuard EPP endpoint security product.

To minimize impact to users, you might want to unblock a program that WatchGuard Endpoint Security has blocked during the process of classification. You can also unblock programs that Endpoint Security classifies as:

• Malware
• PUPs
• Exploits
• Viruses
• Network Attacks

For more information, go to Allow Blocked Items to Run.

For information on how to authorize unknown programs, go to Configure Authorized Software Settings (Windows Computers).

When Endpoint Security detects traffic behavior it determines to be a network attack, you can create exclusions to allow the behavior. For more information, go to Exclude a Network Attack Detection (Windows Computers).

Related Topics

Monitor Threats in WatchGuard Endpoint Security

Remove Ransomware and Restore the System

Remediation Tools in WatchGuard Endpoint Security