cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

Observation mode is blocking

Hello, all! 

I recently stood up a 5.9.1 to replace an aging 5.3. With that being said, I have thousands of end users. Out of the thousands of users, I have roughly 20 machines that are not able to open Google Chrome 71.x while in observation mode. Update mode also blocks Chrome from opening. When I put Solidcore into disabled mode, as predicted, Chrome will be allowed to execute. 

The application is marked known trusted. The logs are not showing anything was blocked from executing. The only thing I see related to Chrome, is when the process is created. 

 

Any ideas?

1 Reply
McAfee Employee gnautiya
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: Observation mode is blocking

Do not disable th product to run Chrome.

Try keeping memory protection feature disabled and then try running chrome.

Also you can add bypass rule for mp for chrome.exe

 

"sadmin attr add -c  chrome.exe"

Was my reply helpful?
If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?
More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support
  • The McAfee ePO Support Center Plug-in is now available in the Software Manager. Follow the instructions in the Product Guide for more.