Issue: EDPR blocking Patch Management updates
How is it possible that EDPR blocks a patch downloaded via patch management and prevents its installation? This has occurred both for a Windows Defender update and for a Microsoft Edge update. How can I resolve this?
Dear administrator,
WatchGuard Endpoint Security 360 has detected a potentially malicious attempt to run the application "MicrosoftEdge_X64_147.0.3912.84_147.0.3912.60.exe" on computer "xxx", on 4/23/2026 9:35:22 PM UTC. This application has been prevented from running to avoid possible attacks. WatchGuard Technologies will verify whether the application is trusted or a security threat as soon as possible and with maximum certainty.
Refer to this support article for more information on the actions you can take on this item or if you want to stop receiving these email alerts.
Blocked item details
Computer: PCUT
Group: All\PC\blocco USB
Blocked item name: MicrosoftEdge_X64_147.0.3912.84_147.0.3912.60.exe
Blocked item path: PROGRAM_FILESX86|\Microsoft\EdgeUpdate\Install{B8E257EA-5F57-4E67-9D50-36D9E521DE35}\MicrosoftEdge_X64_147.0.3912.84_147.0.3912.60.exe
Blocked item hash: 13A57DCDCDF7570D3F9F589B8410686C
Source computer of the blocked item:
Source IP address of the blocked item:
Source user of the blocked item: NT_AUTHORITY\SYSTEM
Dear administrator,
WatchGuard Endpoint Security 360 has detected a potentially malicious attempt to run the application "AM_Delta_Patch_1.449.150.0.exe" on computer "xxxx", on 4/18/2026 4:11:13 AM UTC. This application has been prevented from running to avoid possible attacks. WatchGuard Technologies will verify whether the application is trusted or a security threat as soon as possible and with maximum certainty.
Refer to this support article for more information on the actions you can take on this item or if you want to stop receiving these email alerts.
Blocked item details
Computer: PCAAMMANNATI
Group: All\PC\Blocco Software
Blocked item name: AM_Delta_Patch_1.449.150.0.exe
Blocked item path: WINDOWS|\SoftwareDistribution\Download\Install\AM_Delta_Patch_1.449.150.0.exe
Blocked item hash: 24A5F2CC2D0C96A5D76DD1A12AA63C2B
Source computer of the blocked item:
Source IP address of the blocked item:
Source user of the blocked item: NT_AUTHORITY\SYSTEM
Comments
Hello,
I have the same problem as you, I have the Edge client update which is blocked by EPDR. Is the block legitimate or is it a false positive?
Here is my version which is slightly different: MicrosoftEdge_X64_147.0.3912.86_147.0.3912.72.exe
Hello, @SiSma and @AlexL,
Please open a support case so we can investigate why the MD5 for the files you were blocked were not added to the universal whitelist.
Maybe there was an error in the download, and the MD5 didn't match the one we had recorded?
We would need to analyse the cases separately, as even cases that look the same could be for different reasons.
Thanks
David Carro | Technical support
WatchGuard Technologies, Inc. | www.watchguard.com