Blocked Third-Party Programs

Applies To: WatchGuard Advanced EPDR This topic applies to the WatchGuard Advanced EPDR endpoint security product., WatchGuard EPDR This topic applies to the WatchGuard EPDR endpoint security product., WatchGuard EDR This topic applies to the WatchGuard EDR endpoint security product.

When you use Advanced Protection to block malicious programs, you might see on the WatchGuard Endpoint Security dashboard that Advanced Protection blocks a third-party program that you want to run. For more information, go to Advanced Protection. This topic provides information about causes and resolutions for a blocked program.

When Advanced Protection blocks a program, the dashboard shows the program in the Currently Blocked Programs Being Classified tile. The tile shows the number of programs that your endpoint security product currently blocks.

WatchGuard Endpoint Security products block third-party software at the endpoint. There is no block in the management UI.

Unblock a Program

A program or file remains blocked until your endpoint security product classifies the program or file as goodware, malware, or a PUP.

To see the list of programs that Advanced Protection determines to be a risk before classification, click the Currently Blocked Programs Being Classified tile . To remove a program or file from the list, from the options menu for an entry, select Delete from List.

• If you do not see the program in the Currently Blocked Programs Being Classified list, click View History of Blocked Items to see whether Advanced Protection labels the program as Reclassified as Goodware.
• If Advanced Protection classifies the program as goodware, but still blocks it, use URL Checker to make sure that the endpoint agent on your computer can communicate any updates to WatchGuard Endpoint Security servers. For more information, go to PSInfo URL Checker.
• If Advanced Protection classifies the program as malware, or the program is unknown, use URL Checker to make sure the endpoint agent on your computer can communicate any updates to WatchGuard Endpoint Security servers.
• If you do not have a communication issue and want to contact Support, use the PSErrorTrace tool to generate a diagnostic file that might help with your Support case. You can also use the PSInfo tool to provide more diagnostic logs to help Support troubleshoot your issue. For more information, go to Get Started with PSInfo.