The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Add Access Protection global exclusions

  • Published on Sep 13, 2026
  • 1 minute(s) read
Prev Next

Exclude processes from triggering a rule when there is a violation.

  1. Log on to the system as a user with administrator rights.

  2. Navigate to the default or custom directory. For example:

    cd /opt/McAfee/ens/tp/bin

  3. To add the exclusion:

    ./mfetpcli --setapexclusions [name1:processfile1, name2: processfile2,…]

  4. To view the list of exclusions:

    ./mfetpcli --getapexclusions

  5. To remove the process from the exclusion:

    ./mfetpcli --deleteapexclusions [name1:processfile1, name2: processfile2,…]

Related articles
  • Checking list of exclusions
    Endpoint Security (ENS) > ENS 26.x > Trellix Endpoint Security (ENS) 26.x - Threat Prevention Product Guide - Linux > Managing Endpoint Security (ENS) for Linux tasks > Exploit Prevention > Configuring Exploit Prevention Exclusions
  • Create Access Protection rules
    Endpoint Security (ENS) > ENS 26.x > Trellix Endpoint Security (ENS) 26.x - Threat Prevention Product Guide - Linux > Managing Endpoint Security (ENS) for Linux tasks > Access Protection > Access Protection rules
  • Exclusions tab
    Application Control and Change Control > Application and Change Control 8.x > Trellix Application and Change Control 8.4.x - Windows Product Guide > Interface Reference