Whitelist PROTECT
The GuardWare PROTECT Agent installer deploys several components, including file system drivers, background services, and local daemons. These may be incorrectly flagged or blocked by AV, EDR, or XDR solutions. To avoid this, add the following PROTECT services to your security software’s whitelist or trusted applications list.
Whitelist the entire installation directory and the following components individually:
C:\Program Files\Guardware\PROTECT
C:\ProgramData\GuardwareExecutable Applications (.exe)
1
AZLogin.exe
C:\Program Files\GuardWare\PROTECT\AZLogin.exe
2
Encryptor.exe
C:\Program Files\GuardWare\PROTECT\Encryptor.exe
3
Fe2Policy.exe
C:\Program Files\GuardWare\PROTECT\Fe2Policy.exe
4
GWDirectoryMonitor.exe
C:\Program Files\GuardWare\PROTECT\GWDirectoryMonitor.exe
5
GWDirectoryMonitorService.exe
C:\Program Files\GuardWare\PROTECT\GWDirectoryMonitorService.exe
6
GWProtectEncrypt.exe
C:\Program Files\GuardWare\PROTECT\GWProtectEncrypt.exe
7
GWProtectPolicy.exe
C:\Program Files\GuardWare\PROTECT\GWProtectPolicy.exe
8
GWZip.exe
C:\Program Files\GuardWare\PROTECT\GWZip.exe
9
MailClientLauncher.exe
C:\Program Files\GuardWare\PROTECT\MailClientLauncher.exe
10
ReadHeaderSa.exe
C:\Program Files\GuardWare\PROTECT\ReadHeaderSa.exe
11
SampCheckEncryption.exe
C:\Program Files\GuardWare\PROTECT\SampCheckEncryption.exe
12
SampCrypt.exe
C:\Program Files\GuardWare\PROTECT\SampCrypt.exe
13
SampDir.exe
C:\Program Files\GuardWare\PROTECT\SampDir.exe
14
SampUpdateHeader.exe
C:\Program Files\GuardWare\PROTECT\SampUpdateHeader.exe
15
ScanDecryptService.exe
C:\Program Files\GuardWare\PROTECT\ScanDecryptService.exe
16
Scanner.exe
C:\Program Files\GuardWare\PROTECT\Scanner.exe
17
Toast.exe
C:\Program Files\GuardWare\PROTECT\Toast.exe
18
WebView2DialogHost.exe
C:\Program Files\GuardWare\PROTECT\WebView2DialogHost.exe
19
mip.exe
C:\Program Files\GuardWare\PROTECT\Mip\mip.exe
20
pdfattach.exe
C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdfattach.exe
21
pdfdetach.exe
C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdfdetach.exe
22
pdffonts.exe
C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdffonts.exe
23
pdfimages.exe
C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdfimages.exe
24
pdfinfo.exe
C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdfinfo.exe
25
pdfseparate.exe
C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdfseparate.exe
26
pdftocairo.exe
C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdftocairo.exe
27
pdftohtml.exe
C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdftohtml.exe
28
pdftoppm.exe
C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdftoppm.exe
29
pdftops.exe
C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdftops.exe
30
pdftotext.exe
C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdftotext.exe
31
pdfunite.exe
C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdfunite.exe
32
zstd.exe
C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\zstd.exe
33
GWIconOverlayFix.exe
C:\Program Files\GuardWare\PROTECT\Server\GWIconOverlayFix.exe
34
GWProtectClient.exe
C:\Program Files\GuardWare\PROTECT\Server\GWProtectClient.exe
35
GWProtectDesktop.exe
C:\Program Files\GuardWare\PROTECT\Server\GWProtectDesktop.exe
36
GWProtectExplorerInjector.exe
C:\Program Files\GuardWare\PROTECT\Detours\GWProtectExplorerInjector.exe
37
GWProtectHooksService.exe
C:\Program Files\GuardWare\PROTECT\Detours\GWProtectHooksService.exe
38
GWProtectIFEO.exe
C:\Program Files\GuardWare\PROTECT\Detours\GWProtectIFEO.exe
Network Access Requirement (Azure Key Vault)
In addition to file-level whitelisting, configure a firewall exception to allow the PROTECT client to access Azure Key Vault without modifying the SSL certificate.
Firewall Rule Configuration
Application Name
GWProtectDesktop.exe
Destination URL
<KeyVaultName>.vault.azure.net
Port
443 (HTTPS)
<KeyVaultName> refers to the name of the Azure Key Vault created during the GuardWare PROTECT Server setup process.
Example: If the Key Vault is named guardware-protect, the URL will be:
guardware-protect.vault.azure.net.
Last updated