Endpoint Protection

Hi

I think I might have discovered a bug in SEP 12.1.4100.  Most of my customers use different Application Control rules to block unwanted and known bad applications. As an example we block the “ASK tool updater” service from starting.
We do this by creating and application rule that blocks apnmcp.exe from starting. In Windows 7 and XP this works flawlessly and the service is blocked and logged as started from services.exe.  But in Windows 8.1 this does not work.  It looks like ADC is unable to detect applications started by services.exe in Windows 8.1. Is this a known issues do to some kind of difference in how Windows 8.1 handle services?

Torboro

Is anything showing in the Control log?

Did you contact them about this?

Phone numbers to contact Tech Support:

Regional Support Telephone Numbers:

    United States: https://support.broadcom.com (407-357-7600 from outside the United States)
    Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
    United Kingdom: +44 (0) 870 606 6000

Additional contact numbers: http://www.symantec.com/support/contact_techsupp_static.jsp

http://www.symantec.com/business/support/index?page=contactsupport&key=54619

Nope. Nothing. Even if I create an verbose rule to block/log anything started from services.exe. Nothing is stopped or logged. I'll open a support case.

I don't have a Win8 box to test at the moment but perhaps something changed, I know ADC works/is supported for Win8 but support is the best route. Keep the forum updated with progress. Thanks.