# Whitelist PROTECT

The GuardWare PROTECT Agent installer deploys several components, including file system drivers, background services, and local daemons. These may be incorrectly flagged or blocked by AV, EDR, or XDR solutions. To avoid this, add the following PROTECT services to your security software’s whitelist or trusted applications list.

Whitelist the entire installation directory and the following components individually:

```
C:\Program Files\Guardware\PROTECT 
C:\ProgramData\Guardware
```

#### Executable Applications (.exe)

<table><thead><tr><th width="69" align="center">SN</th><th width="262">File Name</th><th>File Path</th></tr></thead><tbody><tr><td align="center">1</td><td>AZLogin.exe</td><td>C:\Program Files\GuardWare\PROTECT\AZLogin.exe</td></tr><tr><td align="center">2</td><td>Encryptor.exe</td><td>C:\Program Files\GuardWare\PROTECT\Encryptor.exe</td></tr><tr><td align="center">3</td><td>Fe2Policy.exe</td><td>C:\Program Files\GuardWare\PROTECT\Fe2Policy.exe</td></tr><tr><td align="center">4</td><td>GWDirectoryMonitor.exe</td><td>C:\Program Files\GuardWare\PROTECT\GWDirectoryMonitor.exe</td></tr><tr><td align="center">5</td><td>GWDirectoryMonitorService.exe</td><td>C:\Program Files\GuardWare\PROTECT\GWDirectoryMonitorService.exe</td></tr><tr><td align="center">6</td><td>GWProtectEncrypt.exe</td><td>C:\Program Files\GuardWare\PROTECT\GWProtectEncrypt.exe</td></tr><tr><td align="center">7</td><td>GWProtectPolicy.exe</td><td>C:\Program Files\GuardWare\PROTECT\GWProtectPolicy.exe</td></tr><tr><td align="center">8</td><td>GWZip.exe</td><td>C:\Program Files\GuardWare\PROTECT\GWZip.exe</td></tr><tr><td align="center">9</td><td>MailClientLauncher.exe</td><td>C:\Program Files\GuardWare\PROTECT\MailClientLauncher.exe</td></tr><tr><td align="center">10</td><td>ReadHeaderSa.exe</td><td>C:\Program Files\GuardWare\PROTECT\ReadHeaderSa.exe</td></tr><tr><td align="center">11</td><td>SampCheckEncryption.exe</td><td>C:\Program Files\GuardWare\PROTECT\SampCheckEncryption.exe</td></tr><tr><td align="center">12</td><td>SampCrypt.exe</td><td>C:\Program Files\GuardWare\PROTECT\SampCrypt.exe</td></tr><tr><td align="center">13</td><td>SampDir.exe</td><td>C:\Program Files\GuardWare\PROTECT\SampDir.exe</td></tr><tr><td align="center">14</td><td>SampUpdateHeader.exe</td><td>C:\Program Files\GuardWare\PROTECT\SampUpdateHeader.exe</td></tr><tr><td align="center">15</td><td>ScanDecryptService.exe</td><td>C:\Program Files\GuardWare\PROTECT\ScanDecryptService.exe</td></tr><tr><td align="center">16</td><td>Scanner.exe</td><td>C:\Program Files\GuardWare\PROTECT\Scanner.exe</td></tr><tr><td align="center">17</td><td>Toast.exe</td><td>C:\Program Files\GuardWare\PROTECT\Toast.exe</td></tr><tr><td align="center">18</td><td>WebView2DialogHost.exe</td><td>C:\Program Files\GuardWare\PROTECT\WebView2DialogHost.exe</td></tr><tr><td align="center">19</td><td>mip.exe</td><td>C:\Program Files\GuardWare\PROTECT\Mip\mip.exe</td></tr><tr><td align="center">20</td><td>pdfattach.exe</td><td>C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdfattach.exe</td></tr><tr><td align="center">21</td><td>pdfdetach.exe</td><td>C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdfdetach.exe</td></tr><tr><td align="center">22</td><td>pdffonts.exe</td><td>C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdffonts.exe</td></tr><tr><td align="center">23</td><td>pdfimages.exe</td><td>C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdfimages.exe</td></tr><tr><td align="center">24</td><td>pdfinfo.exe</td><td>C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdfinfo.exe</td></tr><tr><td align="center">25</td><td>pdfseparate.exe</td><td>C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdfseparate.exe</td></tr><tr><td align="center">26</td><td>pdftocairo.exe</td><td>C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdftocairo.exe</td></tr><tr><td align="center">27</td><td>pdftohtml.exe</td><td>C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdftohtml.exe</td></tr><tr><td align="center">28</td><td>pdftoppm.exe</td><td>C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdftoppm.exe</td></tr><tr><td align="center">29</td><td>pdftops.exe</td><td>C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdftops.exe</td></tr><tr><td align="center">30</td><td>pdftotext.exe</td><td>C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdftotext.exe</td></tr><tr><td align="center">31</td><td>pdfunite.exe</td><td>C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\pdfunite.exe</td></tr><tr><td align="center">32</td><td>zstd.exe</td><td>C:\Program Files\GuardWare\PROTECT\poppler-24.08.0\Library\bin\zstd.exe</td></tr><tr><td align="center">33</td><td>GWIconOverlayFix.exe</td><td>C:\Program Files\GuardWare\PROTECT\Server\GWIconOverlayFix.exe</td></tr><tr><td align="center">34</td><td>GWProtectClient.exe</td><td>C:\Program Files\GuardWare\PROTECT\Server\GWProtectClient.exe</td></tr><tr><td align="center">35</td><td>GWProtectDesktop.exe</td><td>C:\Program Files\GuardWare\PROTECT\Server\GWProtectDesktop.exe</td></tr><tr><td align="center">36</td><td>GWProtectExplorerInjector.exe</td><td>C:\Program Files\GuardWare\PROTECT\Detours\GWProtectExplorerInjector.exe</td></tr><tr><td align="center">37</td><td>GWProtectHooksService.exe</td><td>C:\Program Files\GuardWare\PROTECT\Detours\GWProtectHooksService.exe</td></tr><tr><td align="center">38</td><td>GWProtectIFEO.exe</td><td>C:\Program Files\GuardWare\PROTECT\Detours\GWProtectIFEO.exe</td></tr></tbody></table>

### Network Access Requirement (Azure Key Vault)

In addition to file-level whitelisting, configure a firewall exception to allow the PROTECT client to access Azure Key Vault without modifying the SSL certificate.

#### Firewall Rule Configuration

| Parameter        | Value                           |
| ---------------- | ------------------------------- |
| Application Name | GWProtectDesktop.exe            |
| Destination URL  | \<KeyVaultName>.vault.azure.net |
| Port             | 443 (HTTPS)                     |

{% hint style="info" %}
`<KeyVaultName>` refers to the name of the Azure Key Vault created during the GuardWare PROTECT Server setup process.
{% endhint %}

**Example**: If the Key Vault is named `guardware-protect`, the URL will be:

`guardware-protect.vault.azure.net`.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.guardware.com/setup-and-deploy/whitelist-guardware/whitelist-protect.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.