Endpoint Protection

 View Only
  • 1.  How to block McAfee Security Scan Plus from Installing

    Posted Jun 20, 2017 03:20 PM

    I am running Symantec Endpoint Enterprise Version 14 and would like to know how I can block McAfee Security Scan Plus from installing when someone tries to download and run it or when it comes with the Adobe Flash Player updates.

     

    How do I setup the rule?

     

    Tim



  • 2.  RE: How to block McAfee Security Scan Plus from Installing

    Posted Jun 20, 2017 03:25 PM

    The application and device control policy contains a pre-configured rule to do this:

    Block applications from running [AC1]

    You just need to add the file name to it. 

    Also, for additional reference: 

    http://www.symantec.com/docs/TECH123745



  • 3.  RE: How to block McAfee Security Scan Plus from Installing

    Posted Jun 20, 2017 03:42 PM

    Yes but when you select to install Adobe Flash updates, there are 2 progress bars on the screen when it comes down with the Flash update. It's not like you get a choice to clich Save As and you can see the filename for the McAfee install file. I'm not sure I would expect it to be the same name as the separately downloadable version. How can I block that when I can't identify the original file payload?

     



  • 4.  RE: How to block McAfee Security Scan Plus from Installing
    Best Answer

    Posted Jun 20, 2017 03:48 PM

    I would imagine a part of the filename is the same, in which case you would need to use regex matching to identify it. Wildcards ( * and ? ) are supported as well so this may take some trial and error.



  • 5.  RE: How to block McAfee Security Scan Plus from Installing

    Posted Jun 20, 2017 04:28 PM

    Ah, I did finally find the filename and yes it is the same name as the one that can be downloaded.

    Tested the rule and it works great!

     

    Thanks Brian



  • 6.  RE: How to block McAfee Security Scan Plus from Installing

    Posted Jun 20, 2017 04:30 PM

    You're welcome. I'm glad to hear that.