{"id":4507,"date":"2026-08-31T11:50:39","date_gmt":"2026-08-31T08:50:39","guid":{"rendered":"https:\/\/support.withsecure.com\/en\/?post_type=support_article&#038;p=4507"},"modified":"2026-08-31T11:50:39","modified_gmt":"2026-08-31T08:50:39","slug":"business-suite-or-elements-endpoint-protection-deepguard-feature-has-blocked-a-safe-application","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/fr\/support-articles\/business-suite-or-elements-endpoint-protection-deepguard-feature-has-blocked-a-safe-application\/","title":{"rendered":"Business Suite or Elements Endpoint Protection DeepGuard feature has blocked a safe application"},"content":{"rendered":"<h3>Issue:<\/h3>\n<p>Elements Endpoint Protection Agent or Business Suite Client Security \/ Server Security DeepGuard feature has blocked a safe application. How do I unblock it?<\/p>\n<h3>Resolution:<\/h3>\n<p>If DeepGuard has blocked a safe application (a false positive), then we still recommend to submit the sample file to our Labs so that we can analyze the file and correct the detection if necessary.\u00a0<\/p>\n<p>You can open a ticket using the Sample Validation service in the Elements portal: <a href=\"https:\/\/support.withsecure.com\/userguides\/product.html#business\/elements-welcome\/latest\/en\/submitting_a_file_sample-latest-en\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/support.withsecure.com\/userguides\/product.html#business\/elements-welcome\/latest\/en\/submitting_a_file_sample-latest-en<\/a><\/p>\n<p>If you are sure that the detection is a false positive, you can create a DeepGuard exclusion to immediately get the application working again. How to centrally create the exclusion depends on if you are using Business Suite or Elements Endpoint Protection.\u00a0<\/p>\n<p><u>For Elements Endpoint Protection:<\/u><\/p>\n<ol>\n<li>Log in to the Elements Security Center:\u00a0<a href=\"https:\/\/elements.withsecure.com\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/elements.withsecure.com<\/a><\/li>\n<li>Go to the <strong>Security Configurations<\/strong> &gt; <b>Profiles\u00a0<\/b>page<\/li>\n<li>Choose the\u00a0profile which the device is using<\/li>\n<li>Go to the\u00a0<b>Scanning settings<\/b>\u00a0page<\/li>\n<li>Scroll down to the\u00a0<b>Global exclusions from all security scans <\/b>section and click\u00a0<b>Add exclusion<\/b><\/li>\n<li>In the Path field add the:\n<ul>\n<li>Full path for the application if you want to exclude a specific application<\/li>\n<li>Folder path if you want to exclude a folder and its sub folders<\/li>\n<\/ul>\n<\/li>\n<li>Click\u00a0<b>Save profile<\/b><\/li>\n<\/ol>\n<p>Alternatively, the DeepGuard exclusion rule can be also added using the\u00a0<b>Security events\u00a0<\/b>page:<\/p>\n<ol>\n<li>Log in to the Elements Security Center portal\u00a0<\/li>\n<li>Go to the <strong>Events<\/strong> &gt; <b>Security events\u00a0<\/b>page<\/li>\n<li>Click on the three dots on the right side of the DeepGuard detection<\/li>\n<li>Select\u00a0<b>Exclude file by SHA1<\/b>\u00a0\n<ul>\n<li>The file SHA1 is automatically added to the\u00a0<b>Exclude folders and files from all security scans\u00a0<\/b>list<\/li>\n<\/ul>\n<\/li>\n<li>Click\u00a0<b>Save profile<\/b><\/li>\n<\/ol>\n<p><u>For Business Suite:<\/u><\/p>\n<ol>\n<li>Log in to the Policy Manager Console<\/li>\n<li>Select a policy domain or host from the Domain Tree<\/li>\n<li>Go to the\u00a0<b>Settings\u00a0<\/b>tab<\/li>\n<li>Go to the\u00a0<b>Real-time scanning\u00a0<\/b>settings<\/li>\n<li>Scroll to the\u00a0<b>Files\u00a0and<\/b>\u00a0<b>applications excluded from scanning\u00a0<\/b>table and enable\u00a0<b>Do not scan the following files and applications\u00a0<\/b><\/li>\n<li>Click\u00a0<b>Add<\/b><\/li>\n<li>Set the scope as<b>\u00a0All scans\u00a0<\/b>and select\u00a0<b>File path\u00a0<\/b>from the drop-down menu<\/li>\n<li>Add the file path\u00a0<b>C:\\Program Files\\Exampleprogram\\examplefile.exe\u00a0<\/b>and click<b>\u00a0OK<\/b><\/li>\n<li>Distribute the policy (Ctrl + D)<\/li>\n<\/ol>\n<p>On all products, to locally allow an application that DeepGuard has blocked:<\/p>\n<ol>\n<li>Open the WithSecure program<\/li>\n<li>Click <b>Settings<\/b><\/li>\n<li>Under the<b> Malware\u00a0Protection <\/b>tab, click <b>View quarantine<\/b><\/li>\n<li>Go to the <b>Blocked<\/b> tab<\/li>\n<li>Select the application that you want Deepguard to allow to run<\/li>\n<li>Click <b>Allow<\/b><\/li>\n<li>Click <b>Close<\/b><\/li>\n<\/ol>\n<p>\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Deepguard blocked a safe application. How do I unblock it?<\/p>\n","protected":false},"template":"","support_article_product":[104],"class_list":["post-4507","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000013344","source_version":1,"source_system":"salesforce","source_date_updated":"2026-08-31 08:50:39","import_hash":"ddc340d87ce173968380f2ce8936ee6bf6e0bfd9","vanilla_article_id":33041,"vanilla_url":"https:\/\/community.withsecure.com\/en\/kb\/articles\/33041-business-suite-or-elements-endpoint-protection-deepguard-feature-has-blocked-a-safe-application","vanilla_kb_id":30,"vanilla_category_id":106,"machine_translated":false,"reactions_helpful_yes":0,"reactions_helpful_no":0},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/support_article\/4507","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/media?parent=4507"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/support_article_product?post=4507"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}