cancel
Showing results for 
Search instead for 
Did you mean: 
bob325
Level 7
Report Inappropriate Content
Message 1 of 5

Software deployment is blocked // Solidcore 6.0

Hi  Team 

Need  help  for  solidcore  6.0  blockind  software  deployment  application,  its  rate  as  unclissified  product  and  have  write  denied  events.  Need  help  how  to  allow  this  application.

I have  clicked  in  suggestion  from  the  below scree shot  and  added  the  file in  updater  , then  added  it  in  existing  rules , but  still  have  the  application  blocked . Please  provided  step  by  step  how  to  unblock this  application.  Please  also  provide  a  process  how  to  change file  from  unclassified  to  trust .

Thanks  in  advance

write denied 3.png

write denied 2.png

4 Replies

Re: Software deployment is blocked // Solidcore 6.0

Try adding that file and any other add-on or depencies files to the white list option, the white-list option is available in your screen-shot.

neelima
Level 12
Report Inappropriate Content
Message 3 of 5

Re: Software deployment is blocked // Solidcore 6.0

Bob,

The events show that there is a need to create the software deployment application as an updater as nilsPsrv.exe is trying to updated whiltelisted scripts.

So you have followed the right steps in adding this to the Policy.

After adding it Policy, you need to ensure that the Policy has been applied on the endpoint. One way to verify is, by waking up agents and then run "sadmin xray" command from ePO to check if 'nilsPsrv.exe' is running as an updater.

Thanks,

bob325
Level 7
Report Inappropriate Content
Message 4 of 5

Re: Software deployment is blocked // Solidcore 6.0

Hi  Neelima,

Thanks  for  your  feedback.  I am  new  from  this  product ,  I  am  trying  to  add  the deployment  software  to  whitelist  but  solidcore  keep blocking  it.

Could  you  please  provide  me  if  there  is  a  KB how  to  create  or  add  whitelist  application  as an  updater? or  write  down  the correct   process  please

When added the process to the updater the approve button still greydown.

approve.png

Thanks

Bob

Message was edited by: bob325 on 22/04/14 05:24:35 CDT

Re: Software deployment is blocked // Solidcore 6.0

You can't directly edit rule groups. Kindly navigate to Menu -> Configuration settings -> Solidcore Rules.

Then search for the rule group where you want to add the settings and you will be able to modify the setting from here.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community