email from beserver blocked despite exclusion set!

[julian.floyd]

Hi,

Following a new installation of backup exec I set an exclusion for the particular server via EPO (4.6.2) in "prevent mass mailing worms from sending email" for beserver.exe (including the full file path). This exclusion has deployed to the server but this rule is still blocking emails.

Any suggextions would be appreciated.

Thanks,

Julian

[Former Member]

can you provide exclusion / exception and the block your seeing? or if this is not a HIPS event and instead is a VSE exclusion, which policy are you working in?

[apoling]

Hi,

please check the actual entry in the AccessProtectionLog.txt on the said server and check if matches the exclusion string you have set. We believe if you say "yes" but actually screenshots of the two areas may be better for anyone later visiting this thread.

Attila

[julian.floyd]

Hi,

This is the error:

and this the exclusion that depoyed to the server:

This exclusion is exactly what was entered into EPO for that server.

Thanks,

Julian

[apoling]

Hi,

thank you for the screenshots.

I have noticed that you also have edgetransport.exe exclusion as by filename and also by absolute path. That might work just because of the single filename and not because of the absolute path (I assume there are no two entities of this file distinguished by only the path so one of them could be theoretically redundant)

Therefore I have doubts specifying an exclusion as absolute path in the case when it includes a space, without the whole path being included in "s (or ''s).

Please add beserver.exe as filename, re-try the operation. If that resolves your issue, please consider using the filename only and not the absolute path.

Of course, you may try experiencing with specifying the absolute path so it is surrounded in "", '', or use with even Progra~1 instead of Program files, and see if that makes any difference.

Attila

Message was edited by: apoling on 30/05/13 13:53:46 CEST

[julian.floyd]

Thanks - that all sounds logical.

I will give that a go.

Regards,

Julian