cancel
Showing results for 
Search instead for 
Did you mean: 

Will McAfee NSP be block Secret File Transfer Protocol ?

Jump to solution

I set up secret file transfer protocol but connection fail .

Check all gateway device and NSP doesn't have any deny log . but i set NSP firewall policy to allow.

The SFTP can connect success.

McAfee NSP was default deny SFTP ?

 

 

1 Solution

Accepted Solutions
McAfee Employee fkazi04
McAfee Employee
Report Inappropriate Content
Message 5 of 7

Re: Will McAfee NSP be block Secret File Transfer Protocol ?

Jump to solution

Most likely the Sensor won't be able to inspect the packet because the traffic will be encrypted.

However, you can take packet capture from the Manager and connect the application. If you can find packet details which are unencrypted, the Sensor should be able to see the connection alert if a signature is available.

 

Regards,

Faizan

6 Replies
Highlighted

Re: Will McAfee NSP be block Secret File Transfer Protocol ?

Jump to solution

Yeah! I am Facing The Same Problem Since Last Three Days and I don't Know How to Fix It. If Anyone Can Help Me Then Please Share Some Solution to Solve it Out.

Hope to Here From You!

Thanks in Advance

Rakesh Chauhan

McAfee Employee fkazi04
McAfee Employee
Report Inappropriate Content
Message 3 of 7

Re: Will McAfee NSP be block Secret File Transfer Protocol ?

Jump to solution

Is there any specific application you have in mind to be blocked? 

For example: if the user tries to transfer the file over DNS, the Sensor can block the initial connection with signature name like 'dns tunnelling'.

 

Regards,

Faizan

 

Re: Will McAfee NSP be block Secret File Transfer Protocol ?

Jump to solution

No, just set up a connection . 

This connection is using SFTP .

 

McAfee Employee fkazi04
McAfee Employee
Report Inappropriate Content
Message 5 of 7

Re: Will McAfee NSP be block Secret File Transfer Protocol ?

Jump to solution

Most likely the Sensor won't be able to inspect the packet because the traffic will be encrypted.

However, you can take packet capture from the Manager and connect the application. If you can find packet details which are unencrypted, the Sensor should be able to see the connection alert if a signature is available.

 

Regards,

Faizan

Re: Will McAfee NSP be block Secret File Transfer Protocol ?

Jump to solution

Thank you for the information , 

The Secret File Transfer Protocol can use McAfee IPS info collector function to watch packet details ?

 

McAfee Employee fkazi04
McAfee Employee
Report Inappropriate Content
Message 7 of 7

Re: Will McAfee NSP be block Secret File Transfer Protocol ?

Jump to solution

Info collector contains process information logs about the manager. Please see the following link to do a packet capture on the Manager.

https://docs.mcafee.com/bundle/network-security-platform-9.2.x-product-guide/page/GUID-FCE3657E-DF2A...

 

Regards,

Faizan

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community