Thread Info
  • State Not Answered
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 1 reply
  • Subscribers 2 subscribers
  • Views 1726 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

On access scanning - deny access to a specific file/file name - is it possible?

emps

Is it possible to use Sophos to detect when a file with a particular name is opened or accessed? Would it be possible to set something in the on access scanning? I know you can set exclusions to ignore certain files - can you do the same when opening?

Would it be possible to set up a scheduled scan to detect files with a cetain file name?

A combinaion of data control and on access scanning would be ideal!

TIA

Paul

:41939


This thread was automatically locked due to age.
Parents
  • 0

    Hello Paul,

    while DLP could do it it insists on one or more of the applications to be selected - after all, it's about transfer and not access. 

    You don't need a scan to search for certain file names - a simple DIR [drive:][path][filename] /s would do :smileywink:

    It might be that the DLP component first checks that it has to deal with the file and then determines the application - in which case it could be able to report the open and if you can make a good case for this perhaps Sophos might be able and willing to help you. But that's just conjecturing ...

    Christian

    :41967
Reply
  • 0

    Hello Paul,

    while DLP could do it it insists on one or more of the applications to be selected - after all, it's about transfer and not access. 

    You don't need a scan to search for certain file names - a simple DIR [drive:][path][filename] /s would do :smileywink:

    It might be that the DLP component first checks that it has to deal with the file and then determines the application - in which case it could be able to report the open and if you can make a good case for this perhaps Sophos might be able and willing to help you. But that's just conjecturing ...

    Christian

    :41967
Children
No Data