The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Why do the exclusions in the Process Guard policy not work?

  • Published on Sep 11, 2026
  • 1 minute(s) read
Prev Next
Skip to main content

There could be some limitations with wildcard matching and system environment variables in excluded paths as the matching is not greedy and environment variables are limited to scope defined (System, User and Process).

For Process Guard 1.5.x and earlier, make sure that the excluded process paths are absolute file paths that include the drive letter, for example C:\Windows\System32\TaskMgr.exe. Other file path types such as folder paths and wildcard paths are considered invalid and not supported.

Related articles
  • Add Policy Exclusions
    Endpoint Security Modules (HX) > Process Guard > Endpoint Security Process Guard Module User Guide Release 1.7.0 > Configuring the Process Guard Module‌ > Configuring the Process Guard Agent Policy‌
  • Why is Process Guard not blocking the process?
    Endpoint Security Modules (HX) > Process Guard > Endpoint Security Process Guard Module User Guide Release 1.7.0 > Frequently Asked Questions‌
  • Adding Process Exclusions to Selected Host Sets
    Endpoint Security Agent (HX) > Endpoint Security Agent (HX) 36 Administrator Guide > xAgent Configuration > Configuring Malware Protection > Defining the Malware Protection exclusion policy > Adding process exclusions to malware protection processing