Loading...

Knowledge Center


Adding a process to exclude under Access Protection fails to take effect when the rule contains System:Remote
Technical Articles ID:  KB68560
Last Modified:  08/21/2012
Rated:


Environment

 

Problem 1

Specifying a Process to Exclude (like psexec.exe, sms.exe, etc) in any Access Protection rule which includes the string system:remote does not take effect.

Problem 2

Adding any process on the Process to Exclude field of the Access Protection rule Anti-virus Standard Protection:Prevent remote creation/modification of executable and configuration files, does not take effect.

Cause

No information about which process is performing I/O (Input/Output) makes it across the network.

Solution

Disable the access protection rule which is using System:Remote. There is no way to add a specific process to be excluded when the access is performed across the network.

Via VirusScan Console:

  1. Click Start, Programs, McAfee, VirusScan Console.
  2. Double-clickAccess Protection and select Anti-virus Standard Protection.
  3. Select the desired access protection rule.
     
    Example:

    Prevent remote creation/modification of executable and configuration files

     
  4. Deselect Block and Report for that rule and click OK.
  5. Exit VirusScan Console.

Rate this document

Did this article resolve your issue?

Please provide any comments below

Affected Products


VirusScan Enterprise 8.7i

Glossary of Technical Terms


Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.
United States - English
© 2003-2013 McAfee, Inc.