Jump to content

dennyx

Members
  • Posts

    2
  • Joined

  • Last visited

Posts posted by dennyx

  1. On 5/5/2016 at 7:09 AM, cpetry said:

    Sorry for the multiple responses after my own.. I just want to document this for others.

     

    So the good news is the rules let you select if they are for the trusted zone only.  :)  They gave me three rules to use for WMI / svchost so RSOP would work.  I'll edit this post tomorrow and share them so others can use them until they make an update to include them as default for the trusted zone.

     

    I know I can put my endpoints in learning mode and generate rules but I prefer not to do that.  I have no idea what should be allowed on a endpoints installation.  If they are infected and it's communicating, I don't need rules generated for a trojan horse.  So yeah..  I'd rather create them manually with absolute certainty. 

    Hi,

    Please, could anyone help me with this issue to solve it? I don't want to set my endpoints in learning mode and rules would help me as much as you can imagine. :-) 

    Thank you.

×
×
  • Create New...