Policy based on Signer - Signed by doesn't fit signed by field

[iverbuyst]

Hello,

We have some exclusions which are based on Signer.

We noticed that there seems to be a limitation on the number of characters in the Signed By field. For example the Adobe Certificate as shown below doesn't fit in the Signed By field and is cut of on CN='ADO

Can anyone confirm that there is a limitation and how we can workaround it?

OID.2.5.4.15=PRIVATE ORGANIZATION, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.1.3.6.1.4.1.311.60.2.1.2=DELAWARE, SERIALNUMBER=2748129, STREET=345 PARK AVE, POSTALCODE=95110, C=US, S=CALIFORNIA, L=SAN JOSE, O="ADOBE SYSTEMS, INCORPORATED", OU=ACROBAT DC, CN="ADOBE SYSTEMS, INCORPORATED"

[cdinet]

What product is this for - ens firewall or other?

[iverbuyst]

In this case it's a ENS Threat Prevention Access Protection policy.

[cdinet]

Thanks, I will move this over to them.  They can answer it better.

[Former Member]

Hi @iverbuyst 

There should not be a limit here. I just tried on my test machine with your example and for me it works fine. Can you confirm which extension versions for ENS you are running and which ePO server version you use?

[iverbuyst]

Hi,

ePO - 5.9.1 (Build 251)

ENS TP Extension - 10.6.1.1171

[mmuthuga]

This was fixed in ENS 10.6.1\10.5.5 November update. Can you update your ENS extension in ePO if using an older extension.

https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/28000/PD28098/en_US/...

[Former Member · Accepted solution]

In my test environment I also have the May Update extensions, so I can't reproduce it like you can. And I use the same ePO version.

Just wondering does it make a difference with which browser you use? 

What about if you create a new policy, do you get the same behaviour?

[iverbuyst]

I created a new policy and now it accepts the complete Signature.

Thanks for the advise.