If a trusted program is blocked, you can exclude the process by creating a policy-based or rule-based exclusion.
Access Protection exclusions don't apply to the Windows Services subrule type.
Open the Trellix Endpoint Security (ENS) Client.
Click Threat Prevention on the main Status page.
Or, from the Action menu
, select Settings, then click Threat Prevention on the Settings page.Click Show Advanced.
Click Exploit Prevention.
Note
Exploit Prevention is not supported in the ARM architecture.
Perform one of the following:
To...
Do this...
Exclude items from all rules.
In the Exclusions section, click Add to add items to exclude from all rules.
On the Add Executable page, configure the executable properties.
Click Save, then click Apply to save the settings.
Specify processes for inclusion or exclusion in a user-defined rule.
Edit an existing user-defined rule or add a rule.
On the Add Rule or Edit Rule page, in the Executables section, click Add to add an executable to exclude or include.
On the Add Executable page, configure the executable properties, including whether to include or exclude the executable.
Click Save twice, then click Apply to save the settings.