Jump to content
karanik

How to block application

Recommended Posts

Hello,

I am trying to block application via policy on ESET Remote Administration.

More specific  from Detection Engine / HIPS / Rules.

Is this right? Is there any other way to do? Is it possible that?

 

Clinets:  Endpoint Antivirus Version of Product 7.0.2100.4

Server:

ESET Remote Administrator (Server), Version 6.5 (6.5.417.0)
ESET Remote Administrator (Web Console), Version 6.5 (6.5.388.0)
CentOS (64-bit), Version 7.7.1908
 

 

 

 

Share this post


Link to post
Share on other sites

We do not have a feature like Application Control. Currently you can use HIPS rules to block access to or execution of specific applications defined by a path.

Share this post


Link to post
Share on other sites
1 minute ago, Marcos said:

We do not have a feature like Application Control. Currently you can use HIPS rules to block access to or execution of specific applications defined by a path.

Yes as said on first post i tried with HIPS.

Can you give a full example? Because i tried with specific path with executable file. For example i tried with below

  • "C:\Program Files (x86)\Notepad++\notepad++.exe"
  • C:\Program Files (x86)\Notepad++\notepad++.exe
  • "C:\Program Files (x86)\Notepad++\*

Share this post


Link to post
Share on other sites

I am wondering if the issue is the use of the "+" sign in the path name? Note the OP is referring to notepad++ app and not the Win notepad.exe app.

As as test, create a HIPS rule for Microsoft's notepad.exe startup and see that works.

Edited by itman

Share this post


Link to post
Share on other sites
23 minutes ago, Marcos said:

This is a rule to block execution of Notepad:

image.png

image.png

image.png

image.png

 

Thank you Marcos. It is working.

Notepad is for example. I block other application. 

Edited by karanik

Share this post


Link to post
Share on other sites
24 minutes ago, itman said:

I am wondering if the issue is the use of the "+" sign in the path name? Note the OP is referring to notepad++ app and not the Win notepad.exe app.

As as test, create a HIPS rule for Microsoft's notepad.exe startup and see that works.

I  just wanted an example.

I wanted to block another application.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...