Software deployment is blocked // Solidcore 6.0

[bob325]

Hi  Team 

Need  help  for  solidcore  6.0  blockind  software  deployment  application,  its  rate  as  unclissified  product  and  have  write  denied  events.  Need  help  how  to  allow  this  application.

I have  clicked  in  suggestion  from  the  below scree shot  and  added  the  file in  updater  , then  added  it  in  existing  rules , but  still  have  the  application  blocked . Please  provided  step  by  step  how  to  unblock this  application.  Please  also  provide  a  process  how  to  change file  from  unclassified  to  trust .

Thanks  in  advance

[Secure-It22]

Try adding that file and any other add-on or depencies files to the white list option, the white-list option is available in your screen-shot.

[neelima]

Bob,

The events show that there is a need to create the software deployment application as an updater as nilsPsrv.exe is trying to updated whiltelisted scripts.

So you have followed the right steps in adding this to the Policy.

After adding it Policy, you need to ensure that the Policy has been applied on the endpoint. One way to verify is, by waking up agents and then run "sadmin xray" command from ePO to check if 'nilsPsrv.exe' is running as an updater.

Thanks,

[bob325]

Hi  Neelima,

Thanks  for  your  feedback.  I am  new  from  this  product ,  I  am  trying  to  add  the deployment  software  to  whitelist  but  solidcore  keep blocking  it.

Could  you  please  provide  me  if  there  is  a  KB how  to  create  or  add  whitelist  application  as an  updater? or  write  down  the correct   process  please

When added the process to the updater the approve button still greydown.

Thanks

Bob

Message was edited by: bob325 on 22/04/14 05:24:35 CDT

[Peeyush]

You can't directly edit rule groups. Kindly navigate to Menu -> Configuration settings -> Solidcore Rules.

Then search for the rule group where you want to add the settings and you will be able to modify the setting from here.