cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
wudevr
Level 7
Report Inappropriate Content
Message 1 of 6

How to Create Exclusions in ePO without an Internet Connection?

Jump to solution

I have ePO 5.3 server installed in a disconnected environment (no internet).

I also have SCCM in the same environment.

I'm getting alerts on the VSE clients :

Blocked by Access Protection ruleNT AUTHORITY\SYSTEMC:\WINDOWS\CCM\CCMEXEC.EXE

So I would like to create an exclusion for this on the ePO server.

From the research I've done,  I'm supposed to select to VSE from the Policy Catalog on the ePO server.

I only have McAfee Agent and Product Improvement Program listed under Product.

How do I create the exclusion?

1 Solution

Accepted Solutions

Re: How to Create Exclusions in ePO without an Internet Connection?

Jump to solution

If you don't see the VSE policies in Policy Catalog, then you don't have the correct VSE Extensions installed (or they're not starting for some reason).  Check under Software Updates on ePO for VSE extensions that you may not have installed/fully updated.  Also check the Extensions page to make sure all your VSE extensions are showing as started.

5 Replies
Reliable Contributor tao
Reliable Contributor
Report Inappropriate Content
Message 2 of 6

Re: How to Create Exclusions in ePO without an Internet Connection?

Jump to solution

This KB may help: Microsoft SMS Agent Host service (ccmexec.exe or smsexec.exe) triggers the Access Protection rule: Prevent termination of McAfee processes Technical Articles ID:   KB71970 Last Modified:  11/3/2016

McAfee Corporate KB - Microsoft SMS Agent Host service (ccmexec.exe or smsexec.exe) triggers the Acc...

If this information was helpful or has answered your question, please select Accept as Solution. This will assist other memebers
wudevr
Level 7
Report Inappropriate Content
Message 3 of 6

Re: How to Create Exclusions in ePO without an Internet Connection?

Jump to solution

Thanks for the reply tao.

The instructions appear to correct the issue in a single VSE client.

I prefer not to have to configure each of the VSE clients individually.

I'm looking for a centralized solution via ePO or even deployable by SCCM.

Reliable Contributor tao
Reliable Contributor
Report Inappropriate Content
Message 4 of 6

Re: How to Create Exclusions in ePO without an Internet Connection?

Jump to solution

Replace step (1) with ePO <> Policy Catalog <> Product: VSE <> Category: Access Protection Policy then proceed to step (2)

If this information was helpful or has answered your question, please select Accept as Solution. This will assist other memebers

Re: How to Create Exclusions in ePO without an Internet Connection?

Jump to solution

If you don't see the VSE policies in Policy Catalog, then you don't have the correct VSE Extensions installed (or they're not starting for some reason).  Check under Software Updates on ePO for VSE extensions that you may not have installed/fully updated.  Also check the Extensions page to make sure all your VSE extensions are showing as started.

wudevr
Level 7
Report Inappropriate Content
Message 6 of 6

Re: How to Create Exclusions in ePO without an Internet Connection?

Jump to solution

Thanks for the reply tkinkead.

You were correct. I didn't have the VSE extensions installed.

I followed the instructions here and now they show up.

Thanks,

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator