You can delete files from the allowlist. This reverts the file's status to quarantined on the endpoint with the next Telemetry communication.
- Go to Quarantine Management > Whitelist.
- Select the desired file.
- Click Delete.
- In the confirmation dialog, click Yes. EMS deletes the file from the allowlist. FortiClient will quarantine the file on the endpoint with the next Telemetry communication. You can view the file on the Files pane.