Deleting a file from the allowlist

You can delete files from the allowlist. This reverts the file's status to quarantined on the endpoint with the next Telemetry communication.

To delete a file from the allowlist:

1. Go to Quarantine Management > Whitelist.
2. Select the desired file.
3. Click Delete.
4. In the confirmation dialog, click Yes. EMS deletes the file from the allowlist. The file will be quarantined on the endpoint with the next Telemetry communication. You can view the file on the Files pane.