Block extract files from network share on server - device and App Control
Created: 02 Sep 2010 | 11 comments
Hi,
Anybody know i can do that?
Regards
discussion Filed Under:
Hi,
Anybody know i can do that?
Regards
Comments
Get the MD5 value of the file
Get the MD5 value of the file and block it using that..
If the drive is mapped then given the complete path of the file G:\ .... Z:\...
VMWARE-- SEP 12.1 vs McAfee vs Trend Micro
hmm. that one is a little bit
hmm. that one is a little bit tough :)
I'd suggest blocking winzip.exe and winrar.exe and windows' own zip folder executable from accessing the network drives.
Would that do ? :)
Best regards,
Bekir Burak Durmaz
Vikram, This can help me to
Vikram,
This can help me to prevent copy file to my workstation?
can you give more details, I know how to generate de md5 but build the rule .hmmm
Regards
Yes it will block the files
Yes it will block the files to be written to your machine..
You can try this
In Application Control Policy.
Select the rule "Block writing to all files and folders"
Edit
Select
Block writing to removable media
Then Under "Apply this rule to follow process"
Edit and then Type the file name ( you can click on Option and give the File Finger print as well
Then Select "Block writing to all files and folders"
then Under "Apply this to follow file and folders"
Click Edit
Then Under "Match files under following drive type"
Select "Network Drive" and Unselect rest.
Click OK
Then on the top Click on
"Actions"
Select Block Access on both the places and Select Enable Logging and Notify User.
Note :: .Apply this rule to a Test Group First...
VMWARE-- SEP 12.1 vs McAfee vs Trend Micro
thanks I will test and let you know.
Sergio, I'm not sure I've
Sergio,
I'm not sure I've understood what you want to do clearly. I thougt you wanted to block compressed file extraction from a network share on to another server. Isn't that true?
If not can you explain in detail?
:D
Best regards,
Bekir Burak Durmaz
Bekir, I need to block at
Bekir,
I need to block at Workstation level files from a specific network share (docs, pdfs, xls). The final user can't write this files on their PC.
REgards
Did the policy work..
Did the policy work..
VMWARE-- SEP 12.1 vs McAfee vs Trend Micro
Vikram, the md5 file is very big , 23 megs,
I gues that approach work for few files.
Regards
have u tried with just the
have u tried with just the file name..without md5
VMWARE-- SEP 12.1 vs McAfee vs Trend Micro
Hello Sergio, SEP cannot
Hello Sergio,
SEP cannot watch both source and destination of the file and decide according to that. All you can do is to control specific types of actions with respect to the destination drive (removable, local or network drives etc). So it will not match your need.
But if the main question is to block extraction of compressed files to local PCs from a network drive, then I would suggest blocking those common extractor processes accessing network drives only. (As I've suggested in my previous post).
Best regards,
Bekir Burak Durmaz
Would you like to reply?
Login or Register to post your comment.