Enabling and disabling Exploit Guard

You can enable and disable Exploit Guard processing (exploit detection and prevention) for all of your host sets using the xAgentdefault policy. You can also enable and disable Exploit Guard processing for specific host sets in your environment using a custom exclusion policy. When Exploit Guard is disabled, other Exploit Guard policy settings are ignored.

This section covers how to use the Web UI to enable and disable Exploit Guard. See the Endpoint Security (HX) REST API Guide for information on using the API to manage your Exploit Guard policies.

If you want to enable exploit detection but do not want enable exploit prevention, enable Exploit Guard as described in this section and then see Enabling and Disabling Exploit Prevention to disable exploit prevention.