Can we add multiple ransomware rules at the same time in ePO.

[mjkhan]

Hi there,

New to ePO, question is can we add 100+ ransomware extension in one or more rules at the same time by browing to any .txt or csv file. Because I have seen people adding the ransomware rule with one extension at a time.

Thanks.

[cdinet]

Unfortunately, bulk updating of policies is currently not a feature. 

[mjkhan]

So is there any way that I can add multiple ransomware extensions at once?

Because if I do have 500 extensoins then I can't waste my whole day or two and it will be very hard to find out which one is added or not later on time.

[mcoffee · Accepted solution]

Unfortunately I've had to do exactly this to ensure we were protected given our customer base.

It was an absolute ball-ache I won't lie, but I couldn't find a better solution at the time, at least now my 5 EPOs are bang up to date and I only need to add new ones as they are found / documented etc.

2 days sh!t work for a decent level of protection - worthwhile.

[mjkhan]

Thanks for your reply, I have one more question, is there any link/forum where I can get the updates of the latest ransomware extensions without missing even a single?

Thanks.

[mcoffee]

ha if only!

I subscribe to McAfee SNS which tends to detail weekly any additional ransomware and the appropriate extensions etc, I also subscribe to similar feeds from other vendors just to ensure everything is captured incase McAfee aren't the first to publish, however I must say with the likes of Petya and the latest revisions of Locky, the McAfee articles were the most detailed and relevant by some margin.

[mjkhan]

And please is there any better/best video training for ePO for Complete Business Protection?

And is McAfee is detecting/removing the .rapid ransomware virus?

Thanks.

[Daveb3d]

You really might consider going to ENS with ATP to avoid all of this..

But you could probably use the web api to bulk add to a policy.   

[mjkhan]

Could you please provide any sample or any guide from where I could probably use the web api to bulk add to a policy. I am really a newbee to McAfee Solution.

Thanks.