Press CTRL+K to open search

Adding monitored application list exclusions

  • Published on Sep 8, 2026
  • 1 minute(s) read
Prev Next

You can add a list of monitored applications you want to exclude from Exploit Guard processing (both exploit detection and exploit prevention) using the Web UI or the API.

Important

The excludedPaths is the only value that will completely exclude a specific process.

File paths should not be included in the excludedPaths list.

The Endpoint Security (HX) server does not validate monitored application entries included in your Exploit Guard exclusion list. You must confirm your application exclusions are correct.

To add monitored application exclusions for all host endpoints:

  1. Log in to the Web UI as an administrator.

  2. From the Admin menu, select Policies to access the Policies page.

  3. In the Policies table, click the Agent Default Policy link to access the Edit Policy page.

  4. Select the Exploit Guard Protection tab.

  5. In the Policy Exclusions section, specify the executable file name of a monitored application (process) you want to exclude from Exploit Guard processing in the field under the Exclude monitored applications from Exploit Guard. For example, adding chrome.exe to the exclusion list will exclude Chrome from Exploit Guard processing.

  6. Click Add to add the monitored application to the list.

  7. Repeat Steps 5 and 6 until you have added all the monitored applications you want to the list.

  8. Click Save.

To add monitored application exclusions for selected host sets:

Note

NOTE: See Creating a Custom Policy for more information about using the Web UI to create a custom policy.

  1. Log in to the Web UI as an administrator.

  2. From the Admin menu, select Policies to access the Policies page.

  3. In the Policies table, click the link for the custom policy you want to modify.

  4. Select the Exploit Guard Protection tab.

  5. In the Policy Exclusions section, specify the name of a monitored application you want to exclude from Exploit Guard processing in the field under the Exclude monitored applications from Exploit Guard.

  6. Click Add to add the monitored application to the list.

  7. Repeat Steps 5 and 6 until you have added all the monitored applications you want to the list.

  8. Click Save.

Now you can assign host sets to the custom policy and set the policy priority level. See Assigning Host Sets to Agent Policies and Configuring Policy Priority Using the Web UI for more information.

:

Related articles