We have web filtering software for controling the web access, but one system from our IT deptment bypassing that, even if it is on same proxy,
and while accessing internet it slows down, sometimes IE shows not responding and at the same time McAfee gets disabled and then internet work fine then automatically McAfee gets enabled
sorry for incomplete post,
It happens b'cos we have OnAcessScan enabled by default and McAfee is trying to block some malicious code from executing which is helping IE to bypass the content filtering software,
thats why McAfee gets disable and that code executes and every web is getting allowed.
we have scanned that system with McAfee Microsoft Security Essentials but nothing found.
Please share you ideas and knowlegde we me.......
Thanks in advance
Regards,
Pravin Phate
Message was edited by: pravinphate on 11/5/10 1:43:08 AM CDTHi Pravin,
Since you have mentioned On Access scan , could you please confirm are we having the issue with McAfee – Consumer products or the Enterprise version ?
Regards,
Dinesh K
No, the issue is with IE, but there must be some script (malicious code) which allows IE to bypass our web filtering software and when McAfee tries to block that script (malicious code) it gets disabled for few seconds,
and if I disable the On Access Scan then IE works fine without any interruption.
Message was edited by: pravinphate on 11/5/10 11:27:24 PM CDTOk, Please let me know the version of your McAfee products so that if they are enterprise version , I could route to to the appropriate section where you would get better help soon to fix the problem
Thanks,
Dinesh K
McAfee Online Community Moderator
Attached screenshot for the same.
Regards,
Pravin Phate
Message was edited by: pravinphate on 12/5/10 11:27:16 PM CDTThanks for the screenshot pravin, Its indeed a enterprise version as its show in the Image "Virus scan Enterprise" . Moving your thread to our enterprise section where you will be getting help soon.
Thanks & Regrards,
Dinesh K
McAfee Online Community Moderator
Thank you Dinesh,
I will be waiting for your reply..
Hi,
I think it'd be helpful for members to have some additional details on your environment.
- what is the name and version of the web filtering solution, and is it a client based one or proxy/firewall/other server based one?
- Could you attach here all the files from the %DEFLOGDIR% folder (zipped) from the problem client?
Also perhaps McAfee services are not protected from getting stopped/killed and this could be why McShield is disabled and then enabled. Could you attach a screenshot from the Properties page of the Access Protection module from the problem client ?
Attila
Message was edited by: Attila Polinger on 5/14/10 10:08:18 AM CESTWe are using third party software for web filtering called "ContentKeeper"
Corporate Headquarters
6220 America Center Drive
San Jose, CA 95002 USA