Endpoint Protection

 View Only
  • 1.  Application and Device Control Logs: iexplore.exe,excel.exe and explorer.exe blocked

    Posted Apr 05, 2013 01:33 AM

    I get the following entries in the 'Application and Device Control Logs: Application Control'. It seems that the blocked porcesses are trusted ones in windows XP, so just want to know if there is anything wrong with my configuration.

     

    05/04/2013 10:29:25 Block Default
    office-176
    EMLYN.NEENU Minor   C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ccSvcHst.exe Not available 0 1
    05/04/2013 10:25:19 Block Default
    office-155
    jaya.cs Minor   C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE12\EXCEL.EXE C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ccSvcHst.exe Not available 0 2
    05/04/2013 10:20:26 Block Default
    office-085
    eldho.varghese Minor   C:\WINDOWS\EXPLORER.EXE C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\SymCorpUI.exe Not available 0 1
    05/04/2013 09:57:52 Block Default
    office-155
    jaya.cs Minor   C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE12\OUTLOOK.EXE C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ccSvcHst.exe Not available 0 1
    05/04/2013 09:43:29 Block Default
    office-254
    anju.vv Minor   C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE12\OUTLOOK.EXE C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ccSvcHst.exe Not available 0 2
    05/04/2013 08:58:37 Block Default
    office-206
    sandhya.s Minor   C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE12\WINWORD.EXE C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ccSvcHst.exe Not available 0 1
    05/04/2013 08:50:13 Block Default
    office-201
    sarah.balu Minor   C:\PROGRAM FILES\ADOBE\READER 9.0\READER\ACRORD32.EXE C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\ccSvcHst.exe Not available 0 1

     



  • 2.  RE: Application and Device Control Logs: iexplore.exe,excel.exe and explorer.exe blocked

    Posted Apr 05, 2013 01:43 AM

     

    Hello,

     

    You can create application exception in sep ADC policy

     

     

    How to create an Application Exception in Symantec Endpoint Protection 12.1

    http://www.symantec.com/docs/TECH203266

     



  • 3.  RE: Application and Device Control Logs: iexplore.exe,excel.exe and explorer.exe blocked

    Broadcom Employee
    Posted Apr 05, 2013 02:07 AM

    you can disable the policy rule if it is not required.



  • 4.  RE: Application and Device Control Logs: iexplore.exe,excel.exe and explorer.exe blocked

    Posted Apr 05, 2013 04:45 AM

    Hi, 

    As pete and manish Said you can either disable this rule or add exceptions.

    Regards

    Ajin



  • 5.  RE: Application and Device Control Logs: iexplore.exe,excel.exe and explorer.exe blocked

    Posted Apr 05, 2013 04:50 AM

    Its blocking all the important exe's like, Iexplorer.Explorer, Outlook.exe, Excel.exe, Better to disable this policy as all these files are in correct locations.



  • 6.  RE: Application and Device Control Logs: iexplore.exe,excel.exe and explorer.exe blocked

    Posted Apr 06, 2013 09:10 AM

     

    Kindly check autorun.inf in block. In Application and Device Control