Endpoint Protection

 View Only
Expand all | Collapse all

Having issues blocking Files & Applications

ℬrίαη

ℬrίαηFeb 13, 2018 02:16 PM

BoomShakaLaka-Its-NSA-Jam

BoomShakaLaka-Its-NSA-JamFeb 13, 2018 02:24 PM

BoomShakaLaka-Its-NSA-Jam

BoomShakaLaka-Its-NSA-JamFeb 13, 2018 03:16 PM

ℬrίαη

ℬrίαηFeb 13, 2018 03:18 PM

BoomShakaLaka-Its-NSA-Jam

BoomShakaLaka-Its-NSA-JamFeb 13, 2018 03:27 PM

  • 1.  Having issues blocking Files & Applications

    Posted Feb 13, 2018 02:10 PM

    I'm testing the Applciation & Device Control policy and I've ran in to an issue.

    I've created a custom Bat file and I've attempted to block the file using its MD5 hash.

    After reading and follwoing the documentation; I can still launch the Bat File.

    https://support.symantec.com/en_US/article.HOWTO80867.html

     

    Has anyone tried to block files by MD5 Hash?

    Is there a better discpritive tutorial on how to block rogue files and appliations?



  • 2.  RE: Having issues blocking Files & Applications

    Posted Feb 13, 2018 02:16 PM

    Did you add it here?



  • 3.  RE: Having issues blocking Files & Applications

    Posted Feb 13, 2018 02:24 PM

     

     

     

     

    Yes I added the Hash There.



  • 4.  RE: Having issues blocking Files & Applications

    Posted Feb 13, 2018 02:27 PM

    And your rule is in 'Production' as opposed to 'Test (log only)'?

    Any entries coming up in the Control log?



  • 5.  RE: Having issues blocking Files & Applications

    Posted Feb 13, 2018 02:57 PM

    The rule has been set for Production.

    Where can I find the Control Log entires?

     

     

     



  • 6.  RE: Having issues blocking Files & Applications

    Posted Feb 13, 2018 02:57 PM

    The rule has been set for Production.

    Where can I find the Control Log entires?

     

     

     



  • 7.  RE: Having issues blocking Files & Applications

    Posted Feb 13, 2018 03:02 PM

    Open the GUI and go to View Logs >> Client Management >> Control Log



  • 8.  RE: Having issues blocking Files & Applications

    Posted Feb 13, 2018 03:16 PM

    Where can I find that?

     



  • 9.  RE: Having issues blocking Files & Applications

    Posted Feb 13, 2018 03:18 PM



  • 10.  RE: Having issues blocking Files & Applications

    Posted Feb 13, 2018 03:27 PM

    No logs where collected.



  • 11.  RE: Having issues blocking Files & Applications

    Posted Feb 13, 2018 03:29 PM

    And the ADC component is installed on the client?



  • 12.  RE: Having issues blocking Files & Applications

    Posted Feb 13, 2018 03:49 PM

    ACD is enabled and installed based on the client install feature set. 



  • 13.  RE: Having issues blocking Files & Applications

    Posted Feb 14, 2018 11:05 AM

    Hi BoomShakaLaka-Its-NSA-Jam,

    ADC work for .exe's rather than .bat.