Kill process

Requirements: Windows, macOS, or Linux.

The kill process action keeps unsanctioned application use, file transfers, and access from compromising your organization's security.

Supported on all operating systems, this policy-initiated kill process action enables you to halt:

• unauthorized applications
• applications being used to perform unauthorized file and network activities, such as copying sensitive files and connecting to prohibited remote hosts using rsync, SFTP, or SCP
• application instances exceeding a permitted limit,
• and more.

For more information, see the FortiDLP Policies Reference Guide.

The kill process action may not halt short-lived activity by a process that completes before the Agent detects a policy violation.