Endpoint Protection

 View Only
  • 1.  Endpoint conlicting with STunnel

    Posted Mar 01, 2012 06:49 PM

    I'm a new user to Endpoint and am having a problem with Stunnel apparently 'Tampering' with the programme which I don't understand.

    Every time Stunnel is run I get this alert:-

    Quote

    Target:  C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin\ccSvcHst.exe

    Event Info:  Create Process Action Taken: Blocked

    Actor Process:  C:\PROGRAM FILES (X86)\STUNNEL\STUNNEL.EXE (PID 1504)

    Unquote

    Stunnel still works but I can't work out why it should be acting this way and I can't find a way to get Endpoint to ignore it without disabling Tamper protection.

    Is there any work around for this as it's very annoying?

    Using Windows 7 64bit.

    Thanks.



  • 2.  RE: Endpoint conlicting with STunnel
    Best Answer

    Posted Mar 01, 2012 07:17 PM

    Please create an exclusion for stunnel.exe. Below KB can help you in this

    How to Create Exceptions or Exclusions for Tamper Protection Alerts that have already been logged