cancel
Showing results for 
Search instead for 
Did you mean: 

Windows 7: Remote Assistance blocked by McAfee Host Intrusion Prevention

Hi!

I'm currently deploying McAfee HIP on enterprise enviroment, and I've noticed I can't perform Remote Assistance on machines with HIP installed. It's blocked by my rule "Blocked Untrusted NetBIOS" that blocks: loc-srv (135), netbios-ns (137) - netbios-ssn (139).

If i remove that rule, the "Block all Traffic" defaul rule blocks it. I understand that i need to create some specific rule to permit Remote Assistance. I've tried open:

  • TCP port 135
  • TCP port 3389
  • All TCP ports that are greater than 1024

According to http://support.microsoft.com/kb/301527, but it doesn't work.

Can you help me with this?

I'm using a W7 (64-bit), ePO server 4.6.1 and Host Intrusion Prevention 8.0.0

Many thanks!

Freddy.

P.D. Remote Desktop works fine!

1 Reply
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: Windows 7: Remote Assistance blocked by McAfee Host Intrusion Prevention

Can you post screenshots of the blocked RDP traffic and your firewall rule to allow the traffic?  If necessary/possible, open a Service Request with McAfee Support to have those details reviewed.