How to exclude a file or folder from Real-Time Scanning or DeepGuard for Elements Endpoint Protection? - WithSecure Community
<main>
<article class="userContent">
<h3 data-version="9" data-article="000007319" data-id="issue">Issue:</h3>
<p>How to create a Real-Time Scanning or DeepGuard exclusion for a file or folder for Elements Endpoint Protection (EPP for Computers or EPP for Servers) when the SHA-1 of the application changes with each update?</p>
<h3 data-id="resolution">Resolution:</h3>
<p>You can exclude a file or folder from all security measures by following these steps:<br></p><ol><li>Log in to the Elements Security Center: <a rel="nofollow" href="https://elements.f-secure.com/">https://elements.f-secure.com/</a></li><li>Click the <b>See more details </b>link under the product category <b>Endpoint Protection</b></li><li>Go to the <b>Profiles </b>page</li><li>Choose the profile which the device is using</li><li>Go to the <b>General settings</b> page</li><li>Scroll down to the <b>Exclude folders and files from all security scans </b>section and click <b>Add exclusion</b></li><li>In the Path field add the:
<ul><li>Full path for the application if you want to exclude a specific application</li><li>Folder path if you want to exclude a folder and its sub folders</li></ul></li><li>Click <b>Save and publish</b></li></ol>
Note that you can use wildcards when creating the exclusions:<br>For example: <b>C:\Users\*\AppData\Local\test\ </b><br><br>This would exclude the AppData\Local\test\ folder and all its sub folders for all users.<br><br>If you want to locally on the device itself create the exclusion:
<ol><li>Open the Elements Agent user interface on the device</li><li>Go to <b>Settings </b></li><li>Go to the <b>Malware protection </b>settings page</li><li>Click <b>view quarantine </b>(enter administrator username and password if needed)</li><li>Select the <b>Excluded </b>tab</li><li>Click <b>Add new </b></li><li>Add the file path or folder path</li><li>Click <b>OK</b></li></ol>
DeepGuard can also be excluded using the SHA-1 of the process:
<ol><li>Log in to the Elements Endpoint Protection portal </li><li>Go to the <b>Security events </b>page</li><li>Click on the three dots on the right side of the DeepGuard detection</li><li>Select <b>Exclude file by SHA1</b>
<ul><li>The file SHA1 is automatically added to the <b>Exclude folders and files from all security scans </b>list</li></ul></li><li>Click <b>Save and publish</b></li></ol><p>Article no: 000007319</p>
</article>
</main>