Add files to the allow list for specific endpoints

On the ePO - On-prem console, select Menu → Application Control → Policy Discovery to open the Policy Discovery page.

Click a row to review request details in the Request Details page.

Each row in the Enterprise level activity pane represents an executable file and endpoint combination.

Click Allow Locally for a row.

The Allow Locally dialog box lists one or more paths to add to the allow list.

Note

The Allow Locally action is available only for requests that are generated when you execute an application that isn't in the allow list (Application Execution activity).

Review and customize the listed paths.

For example, if you execute proc.exe for an endpoint, these paths might be listed.

C:\Program Files\<App Name>\proc.exe

C:\Program Files\<App Name>\a.dll

C:\Program Files\<App Name>\b.dll

To avoid redundancy, add only the C:\Program Files\App Name path.

Click OK.