Ransomware Protection Exclusions
You can exclude applications or folders from protection against ransomware.
Think carefully before you add exclusions because it reduces your protection.
You can exclude applications or folders used by applications.
You might want to exclude an application that we've incorrectly detected as a threat or an application that is incompatible with ransomware protection. For example, if you have an application that encrypts data, you might want to exclude it. This stops us from detecting the application as ransomware.
Or you might want to exclude folders used by specific applications that show performance issues when being monitored by ransomware protection. For example, you might want to exclude folders used by backup applications.
We exclude these applications and folders from ransomware protection for all your users and their devices.
If you want to exclude applications or folders from ransomware protection for some users or devices, you can do this using an Endpoint Threat Protection policy. See Threat Protection Policy.
If you want to exclude applications or folders from ransomware protection for some servers, you can do this using a Server Threat Protection policy. See Server Threat Protection Policy.
As adding exclusions reduces your protection, we recommend that you use policies to target users and devices where the exclusion is necessary rather than using this global option.
To exclude an application or folder, do as follows:
- Go to Overview > Global Settings > Global Exclusions.
- Click Add Exclusion (upper right of the exclusions list).
In Exclusion Type, select Ransomware Protection (Windows).
Choose whether you want to exclude a process or a folder.
In VALUE, enter the path for the process or folder you want to exclude.
You can use variables here. See Exploit mitigation or ransomware exclusions: wildcards and variables.
Click Add or Add Another. We add the exclusions to the list on the Global Exclusions page.
To edit an exclusion later, click its name in the exclusions list, enter new settings, and click Update.