Showing results for 
Search instead for 
Did you mean: 

Technical MCP question (Bypass processname)



I need to know how the MCP bypass for processname work on a technical level. I mean what exactly does it look for when a "processname bypass" is included on the client and if every processname is uniqe in its own way? 


Couldn't find any info (sorry if this has been brought up before). 



4 Replies
McAfee Employee aloksard
McAfee Employee
Report Inappropriate Content
Message 2 of 5

Re: Technical MCP question (Bypass processname)


Hope you are doing well.


Process name is Name of the process that generated the traffic being redirected.


Process Name List — Web traffic coming from the processes in this list bypasses the proxy server. A
process runs on the endpoints. Windows process names must end with .exe.  MacOS process names
don't require a file name extension. 


Below is an example:-


Bypassing the cisco AnyConnect from MCP” can be achieved as below:-

For Cisco AnyConnect VPN, add the following processes to the MCP bypass list:-

Cisco AnyConnect

You can add the executable of the VPN product in the MCP Polices Bypass list. For example, vpnagent.exe for Cisco Anyconnect VPN.


Also below executables should also be placed on MCP Policies bypass list:-

• vpncli.exe
• vacon64.exe
• vacon.exe
• vpnui.exe
• vpnagent.exe


Windows process names must end with .exe. Mac OS X or macOS process names do not require a file name extension.



Alok Sarda


Re: Technical MCP question (Bypass processname)

Thank you aloksard for quick answer. 

So far i'm with you. But what i'm interested in is what happens once you change hash of a program (excluded)? Or if I change the install path of  the process or manipulate the name  of another program (not excluded) to a .exe processname that I know for a fact is excluded in order to get around the MCP? 

Re: Technical MCP question (Bypass processname)

Anyone? Still no answer?
Level 10
Report Inappropriate Content
Message 5 of 5

Re: Technical MCP question (Bypass processname)

It's based process name running.  If you have "clientvpn.exe" and change the hash every day, as long as the process name is "clientvpn.exe" it will work.


At least that is the experience we have seen.


Does that help?

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community