cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
erez
Level 8
Report Inappropriate Content
Message 1 of 8

Can't Exclude Access Protection files/others

Hey!

I'm trying for so long to exclude my other EDR + NAC access, but nothing seems to work.

Basically, it's going under these 2 rules:

 

Remotely accessing local files or folders

Remotely creating or modifying files or folders

Event ID 1092.

ENS is version 10.7.0

I tried going to the Access Protection, and put them inside the exclusions, and also in the rules, by the specific rule and add them to the exclude list.

What else can I do? I went crazy with this.

Edit:

Something that I noticed in this thread:

https://kc.mcafee.com/corporate/index?page=content&id=KB68560&_ga=2.60828655.296607637.1607246616-16...

My Source file path is "SYSTEM:REMOTE",

Is that make a difference? 

Thanks.

 

 

7 Replies
yaz
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 8

Re: Can't Exclude Access Protection files/others

HI @erez 

Thanks for reaching out to community. 

Can you try adding exclusions on the global exclusions within the access protection and check if that resolves the issue?

Screenshot for your reference. 

Capture.JPG

Was my reply helpful?

Kindly give me a Kudo. If I have answered your query, can you accept this as solution, so that together we can help other community members. 

 

 

erez
Level 8
Report Inappropriate Content
Message 3 of 8

Re: Can't Exclude Access Protection files/others

Hey!

that's the first thing I've tried to do!

But nothing seems work!

Any other ideas?

yaz
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 8

Re: Can't Exclude Access Protection files/others

Hi @erez 

Can you confirm if the policy is applied to the Endclient?

Are you able to see the exclusions you make on the ePO in the end machine as well?

Kindly confirm.

Was my reply helpful? If yes, Give me a Kudo.

If this resolves your query, kindly mark this as solution, so that together we help other community members. 

erez
Level 8
Report Inappropriate Content
Message 5 of 8

Re: Can't Exclude Access Protection files/others

Hey!

Yes, I have a dedicated windows VM to replicate the issue,

So I manually check for the policy and double-check with verifying inside the ENS settings.

Thanks.

yaz
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 6 of 8

Re: Can't Exclude Access Protection files/others

Hi @erez 

If issue reproducible, I request you to follow KB91797

https://kc.mcafee.com/corporate/index?page=content&id=KB91797

Gather debug enabled MER logs and open an SR so that we can see what is the issue in detail. 

 

 

erez
Level 8
Report Inappropriate Content
Message 7 of 8

Re: Can't Exclude Access Protection files/others

Thanks,

I already opened a SR a week ago, it's just that I get an answer only once a day so I tried also ever here since the response is quicker..

Thanks for trying anyway. 

yaz
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 8 of 8

Re: Can't Exclude Access Protection files/others

Thanks @erez 

If you have SR open, possibly may be some investigation going on with our team. You should be getting an update from our support. 

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community