☰
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
therez
Level 9
Report Inappropriate Content
Message 1 of 2
‎08-19-2019 06:16 AM

Unable to get access protection rule to work correctly

Hello. I'm trying to create an AP rule for Windows to block old Agent installs however I cannot get it to work correctly. In essence I want to block 'frminst.exe', 'mfeagent.msi' and 'mfeagent_x64.msi' from executing. I want to exclude supported versions of the 3 files by filename+hash. However, when I set this up I either end up blocking all versions of frminst.exe or allowing them all. Does anyone have any examples of this scenario working please? Thanks!
0 Kudos
Reply
1 Reply
GA
Level 8
Report Inappropriate Content
Message 2 of 2
‎08-23-2019 02:58 AM

Re: Unable to get access protection rule to work correctly

Did you try only with MD5?

Name of the files should be the same, only the MD5 should be different.

0 Kudos
Reply
You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use our Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from product experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by employees.
Join the Community
Join the Community

TrellixSkyhigh Security | Support Trellix.com SkyhighSecurity.com

Legal Privacy Copyright © 2023 Musarubra US LLC