cancel
Showing results for 
Search instead for 
Did you mean: 
toni01
Level 7

Add Exceptions in Access Protection Rule (EPO)

Jump to solution

Hello,

I have the problem that after installing the Chrome browser It will not be open.

An error message appears:
"The specified device or path or file cannot be accessed. You may not have sufficient permissions to access the item. " (See appendix)
So the permissions are there, I can easily get into all the directories.

The ACCESSPROTECTIONLOG displays the following message:
"Date/time blocked by Access Protection Rule NT Authority \ System C:\windows\system32\svchost. EXE C:\Program Files (x86) \MCAFEE\VIRUSSCAN Enterprise\mcconsol. EXE common-default protection: stopping McAfee processes prevent blocked action: stop"

When I disable Access protection in the policy for access Protection on the EPO, I can easily start and use chrome.

Changes to the default protection do not result in the desired outcome.


Only disabling Access protection allows me to start and use the Chrome browser.

The question now is, how can I add an exception for access protection?

Products: epolicy orchestrator 5.3, VirusScan 8.8 patch9

Best thanks

0 Kudos
1 Solution

Accepted Solutions
Daniel_S
Level 12

Re: Add Exceptions in Access Protection Rule (EPO)

Jump to solution

As Frank already stated out the message doesn´t fit to your rules.

But the hardening rules from SAE+ do, if the browser is not allowed.

Why you are able to run Chrome if you disable it is out of my range for now.

But I suggest you check your hardening settings for SAE.

Regards

Dan

Best regards
Dan
0 Kudos
9 Replies
Peacekeeper
Level 20

Re: Add Exceptions in Access Protection Rule (EPO)

Jump to solution

Moved to EPO forum

0 Kudos
toni01
Level 7

Re: Add Exceptions in Access Protection Rule (EPO)

Jump to solution

Hi,

the problem is that I need a rule in which I can add an exception, like chrome.exe, to the Access protection.

Christan

0 Kudos
Daniel_S
Level 12

Re: Add Exceptions in Access Protection Rule (EPO)

Jump to solution

Do you have SiteAdvisor Enterprise in use?

Best regards
Dan
0 Kudos
toni01
Level 7

Re: Add Exceptions in Access Protection Rule (EPO)

Jump to solution

Yes, i have.

Where do you see the context?

0 Kudos
Daniel_S
Level 12

Re: Add Exceptions in Access Protection Rule (EPO)

Jump to solution

As Frank already stated out the message doesn´t fit to your rules.

But the hardening rules from SAE+ do, if the browser is not allowed.

Why you are able to run Chrome if you disable it is out of my range for now.

But I suggest you check your hardening settings for SAE.

Regards

Dan

Best regards
Dan
0 Kudos
toni01
Level 7

Re: Add Exceptions in Access Protection Rule (EPO)

Jump to solution

That's the solution.

Site Advisor blocked starting Chrome

03.PNG

Thanks @all.

Regards

Christian

0 Kudos
frank_enser
Level 12

Re: Add Exceptions in Access Protection Rule (EPO)

Jump to solution

Hi,

the access protection message doesn't fit to the observed chrome.exe block. Try to find the log message citing the chrome.exe. There will also be the name of the triggered rule, which you must change.

Regards,

Frank

0 Kudos
toni01
Level 7

Re: Add Exceptions in Access Protection Rule (EPO)

Jump to solution

Hi Frank,

the message from attached image 01 is displayed in the log file when I try to start chrome.exe:

01.PNG

If I disable the rule, this does not change the fact that the same message appears when the URChrome.exe is called.

02.PNG

The chrome.exe can only be called if Access Protection (pic 02) is completely disabled.

Gruß

Christian

0 Kudos