generic application invokation or hooking rules prevent arguments from being passed
I have a an application that our users user that allows them to pick set of file names displayed by the application and then send the file or folder name to another application, such as SlickEdit as found on the registry or default installation path and pass it the conjoined filenames and an option via Process.Start in the StartInfo structure which is convertible to a string. Recently our System admins (SAs) were instructed to upgrade the protections on our machines to include the 6010/6011 Host IPS protections for generic application invocation and hooking. I had one of them look at it and he was able to disable that but the arguments don't seem to be passed to SlickEdit as they used to be. What do I need to get the SAs to change?
Additionally, the IPS Options feature "Automatically include network-facing and service-based applications in the application protection list" can cause 3rd party application issues if the HIPS DLLs are hooked into a third party app. Disable this option, reboot the system, and retest to see if the IPS hooking causes the issue. This is typical when the issue is resolved by disabling the Host IPS module entirely, but not when you disabling the all IPS Signatures (e..g, by setting the IPS Protection policy to IGNORE all severities). If disabling this IPS Options feature resolves the issue, look to create an application protection exclusion in your policies for that 3rd party application executable; ref https://kc.mcafee.com/corporate/index?page=content&id=KB79850.
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.