cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Former Member
Not applicable
Report Inappropriate Content
Message 11 of 13

Re: McAfee ATP blocking McAfee Process?

Jump to solution

Hi @ChrisQ 

"Malicious as I have Trigger DAC on might be malicious, Block on most likely malicious, and Clean on known malicious."

>> this is why you don't get these events. Your ATP settings are not set to trigger for files with an "unknown" reputation. If you were to change these to "unknown", then you'd start to get triggers for it.

SWISS
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 12 of 13

ENS: Mcafee detects it OWN stuff in ATP Module

Jump to solution

Hello,

 

As i understood:

 

The Framework package get's compiled each time new. So it will have a different EXE as example

if you INCLUDE credentials (Logon info from your domain) in it. Blocking the filename is past decade (We are at MD5 Checksumm level).

I asume there SHOULD be a mechanism where the EPO Server (If you egenrate a Framework) package PUSHED that into into ATD/TIE.

Do you use the ATP MODULE (THIRD) with or with TIE-Server.

If you don't have a TIE-Server FROGET running at BLOCK UNKNOWN. 

There will be many things and Directory you will have to exclude manual.

 

Greetings from Switzerland

 

Greetings from Switzerland
SWISS
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 13 of 13

Re: McAfee ATP blocking McAfee Process?

Jump to solution

YOU are at extreme OLD version of ENS > 10.5.3. Thats like running XP.

This should WORK from ENS 10.6.1 OCTOBER release or BEST use 10.7

Forget anything before 10.6.1

 

UPDATE NOW!

Greetings from Switzerland
You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use our Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from product experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by employees.
Join the Community
Join the Community