I am running Symantec Endpoint Enterprise Version 14 and would like to know how I can block McAfee Security Scan Plus from installing when someone tries to download and run it or when it comes with the Adobe Flash Player updates.
How do I setup the rule?
Tim
The application and device control policy contains a pre-configured rule to do this:
Block applications from running [AC1]
You just need to add the file name to it.
Also, for additional reference:
http://www.symantec.com/docs/TECH123745
Yes but when you select to install Adobe Flash updates, there are 2 progress bars on the screen when it comes down with the Flash update. It's not like you get a choice to clich Save As and you can see the filename for the McAfee install file. I'm not sure I would expect it to be the same name as the separately downloadable version. How can I block that when I can't identify the original file payload?
I would imagine a part of the filename is the same, in which case you would need to use regex matching to identify it. Wildcards ( * and ? ) are supported as well so this may take some trial and error.
Ah, I did finally find the filename and yes it is the same name as the one that can be downloaded.
Tested the rule and it works great!
Thanks Brian
You're welcome. I'm glad to hear that.