ENS Web Control blocking Dell's SupportAssistLauncher.exe download as malicous

[User27605043]

This is interesting. I can't imagine why ENS thinks this file is Malious. I have sent it off to Support and they said they added it to GTI, yet it is still being blocked. I am not sure what was actually done.

Does anyone have a suggestion for how to allow users to use our Dell resource?

From ePO

Threat Source Process Name: C:\Program Files (x86)\McAfee\Endpoint Security\Web Control\McChHost.exe

Threat Source URL: hxxps://removedforposting/serviceability/eSupport/SupportAssistLauncher.exe?dl_uid=cbc862e4-8666-436d-b515-7f4d363d9dab&dc=63BAF556AFD3956BBBAB83B578F65234&appname=Common

Event Category: Malicious file download

[yaz]

Hi @User27605043 

Thank you for reaching out to McAfee Community.

Based on the provided details, it looks like you are URL from DELL is being blocked. 

Can you kindly check the below setting from the Web Control File options policy is set to Very High (Capture.jpg)?

If yes, can you change this to Medium and see if this is resolving.

You can also change to Very low and test. 

You can write to **personal information omitted** and review URL for further updates.

Was My Reply helpful?

If Yes, Please give me a kudo.

If I have answered your query, kindly mark this as solution so that we help other community members together.