Endpoint Protection

 View Only
  • 1.  SEP Application control cannot block filefingerprint

    Posted Jun 16, 2011 10:21 PM

    Hello,

    I tried to block all of the games that is installed on my workstation.

    First I run a checksum.exe to collect all of the games filefingerprint. After collecting, I used Application and Device control to block the games.

    Then I add the filefinger print to the Application and Device control policy and I set it to production.

    I run the games that I had add to the list of the blocked games but unfortunately the games did not block by SEP.

    Any other things need to be consider that I didn't done? Is the filefingerprint of the games are exclusively to the only PC that I had run the checksum? Or all of the application (Games) have their own unique code regardless of the PC that checksum had run.

    Attached is the Screenshots of the settings that I've done.  

    Thanks, I need it very much so that I can prevent all of the games to be run. 

     

    Note: All of the SEP features are installed on the workstations (AV,Firewall,IPS,Apps Dev Control)



  • 2.  RE: SEP Application control cannot block filefingerprint

    Posted Jun 20, 2011 10:09 AM

    Is your client system running a 64bit OS? ADAC will not run on the 64bit platform.



  • 3.  RE: SEP Application control cannot block filefingerprint

    Posted Jun 21, 2011 02:41 AM

    Actually some are windows 7 32bit and majority is XP

    I tried it to the windows xp sp3 and it is effective and working. but on the windows 7 its not. I don't know why? or what is the reason why it is not working on the windows 7. 

    Any other things to be consider? thanks Sir Thomas. I appreciate your answer. :) 



  • 4.  RE: SEP Application control cannot block filefingerprint

    Posted Jun 21, 2011 09:52 AM

    What version of SEP are you running? Windows 7 support came out with RU5, but there are some issues on that build with WIn7. Make sure you are running the latest build available (RU6 MP3).