Endpoint Protection

 View Only

  • 1.  Blocking IE 8 but not IE 9 with ADC

    Posted Feb 27, 2013 04:32 PM

    What is the best way to distinquish between Internet Explorer 8 and Internet Explorer 9 so that I can effectively block IE 8, but allow the use of IE 9 with Application and Device Control in SEP. I don't think using checksum.exe and hashes will work will because of the multiple versions of IE 8 and IE 9 that exists (variations due to patches and such). Certainly using the process name or appliation path won't work because they are the same.

     Any ideas?

     Thank you in advance!



  • 2.  RE: Blocking IE 8 but not IE 9 with ADC

    Posted Feb 27, 2013 04:40 PM
    The best option would be to use hash blocking. I'm not sure there is an easier way with ADC. Does the hash actually change when IE is patched? I'm not sure iexplore.exe changes but only when new versions are released. Only files used by IE may change with a patch but not iexplore.exe.