Hi,
I am implimenting a solution where only approved apps can communicate on the network. This has been hit and miss, as sometimes an app will be blocked in the clients firewall and visable in the log but it won't appear on the endpoint console for me to be able to add. I've had problems with our banking software utilising Java (javaw, javaws etc launching hidden apps) but managed to sort that. My problem now is with tight vnc.
There are two executables, viewer and server. I sucessfully allow the viewer app to communicate, but the server app does not show in the endpoingt console, even though the clients firewall log explictly mentions that the executable was blocked because no matching rule can be found. I then go to "new apps" or "no rules" in the add application dialog but it isn't there. This has been ongoing for a day or two now and I can't find any related issues on the net.
Please help!
One last question, when a user inserts a USB stick for example, and right clicks the disk and clicks "Scan with sophos" they are presented with UAC admin prompt, they obviously don't have admin creds. How can I get around this, i want them to activley scan and be mindful of what they are putting into the system but they can't as they don't have admin rights.
This thread was automatically locked due to age.
