Proactive Threat Protection
Updated: 23 May 2010 | 1 comment
This issue has been solved. See solution.
Morning Everyone,
I hope someone can help me here, i'm wondering if I opt Internet explorer out of the cross domain protection feature, will SEP 11 MR4 protect me against the threats which I have left open by making this change?
Just to outline exactly what I am doing,
to opt-out of the new cross-domain protection feature (which blocks access to scripts on the local file system).
Opting your application out of this feature leaves it vulnerable to web sites that may scan your computer looking for script files or other information. If your application is designed to host arbitrary content, this option is not recommended.
1. Click “Start”, “Run”.
2. Enter “regedit”
3. Find and select the following registry entry:
HKEY_LOCAL_MACHINE
SOFTWARE
Microsoft
Internet Explorer
MAIN
FeatureControl
4. Click “Edit”, “New”, and “Key”
5. Enter FEATURE_BLOCK_LMZ_SCRIPT
6. Next, click “Edit”, “New”, and “DWORD”
7. The name should be set to the process name of the application experiencing the problem. (In our case IE)
8. The Value (double-click on the newly created entry) should be set to “0” (this opts the process out of this feature, enabling the workaround)
8. The Value (double-click on the newly created entry) should be set to “0” (this opts the process out of this feature, enabling the workaround)
9. Close the Registry Editor
10. Close all open instances of the affected process (and IE) and restart the program.
We need to do this for the purpose of a client.
I know the best plan is not to do this, although it is necessary, and I am wondering will SEP protect us against these threats which may be more prevelant?
Thanks.
discussion Filed Under:
Comments
The cross domain protection
The cross domain protection is mainly used for protecting your browser from ActiveX Exploits and other malware.
Also, this falls under web browser protection. So I do not think it falls under the security scope of SEP Client.
These activex controls are the main attack vectors of remote monitoring and controlling threats.
Best,
Aniket
Would you like to reply?
Login or Register to post your comment.