IPB

Welcome Guest ( Log In | Register )

 
Reply to this topicStart new topic
> [CNR] Application startup control issue, may be a bug not sure
manawa
post 6.09.2011 15:47
Post #1


Advanced Member II
****

Group: Public Testers
Posts: 309
Joined: 25.09.2007
From: Sri Lanka




dear all,

1. im working on a vmware workstation 7.1.2 build-301548
2. i setup 2 pc's. 1 is ms win server 2003 r2 as a AK server & as a client ms win xp sp3.
3. both pc's are in WORKGROUP.
4. then i configure application startup control in protection policy.
5. by default policy window like this in image1
6. and from the client side it is shows like image2
7. then i close the pad lock which was opened image3.
8. after enforcing the policy to client it is shows link this image4.
9. after this i can't run any application in the client pc. image5.

why is the default allow rule doesn't work after policy enforced? is this a bug? unsure.gif

This post has been edited by enkryptor: 13.09.2011 15:09
Attached File(s)
Attached File  image1.JPG ( 68.27K ) Number of downloads: 28
Attached File  image2.JPG ( 67.58K ) Number of downloads: 32
Attached File  image3.JPG ( 66.01K ) Number of downloads: 23
Attached File  image4.JPG ( 68.31K ) Number of downloads: 32
 


--------------------
Kaspersky Lab Certified Data Security Technician

Avian - Kaspersky Lab's Sri Lanka\Maldives Distributor www.avian.lk
Go to the top of the page
 
+Quote Post
manawa
post 6.09.2011 15:50
Post #2


Advanced Member II
****

Group: Public Testers
Posts: 309
Joined: 25.09.2007
From: Sri Lanka




QUOTE(manawa @ 6.09.2011 17:17) *
dear all,

1. im working on a vmware workstation 7.1.2 build-301548
2. i setup 2 pc's. 1 is ms win server 2003 r2 as a AK server & as a client ms win xp sp3.
3. both pc's are in WORKGROUP.
4. then i configure application startup control in protection policy.
5. by default policy window like this in image1
6. and from the client side it is shows like image2
7. then i close the pad lock which was opened image3.
8. after enforcing the policy to client it is shows link this image4.
9. after this i can't run any application in the client pc. image5.

why is the default allow rule doesn't work after policy enforced? is this a bug? unsure.gif



image 5 is like this
Attached File(s)
Attached File  image5.JPG ( 75.71K ) Number of downloads: 22
 


--------------------
Kaspersky Lab Certified Data Security Technician

Avian - Kaspersky Lab's Sri Lanka\Maldives Distributor www.avian.lk
Go to the top of the page
 
+Quote Post
enkryptor
post 6.09.2011 16:28
Post #3


Tester
*************

Group: KL Russia
Posts: 4926
Joined: 22.09.2008




It's odd you have one single rule by default (2nd screenshot). There must be 3 default rules right after the default installation. Didn't you import any settings from a previous build?

Here's how it must be by default:
Attached File  default.png ( 69.32K ) Number of downloads: 26
Go to the top of the page
 
+Quote Post
manawa
post 6.09.2011 16:50
Post #4


Advanced Member II
****

Group: Public Testers
Posts: 309
Joined: 25.09.2007
From: Sri Lanka




QUOTE(enkryptor @ 6.09.2011 17:58) *
It's odd you have one single rule by default (2nd screenshot). There must be 3 default rules right after the default installation. Didn't you import any settings from a previous build?

Here's how it must be by default:
Attached File  default.png ( 69.32K ) Number of downloads: 26



hi enkryptor,

i didn't import settings. these are 100% default settings.

when i install endpoint security from client end (individually) it is contains only one rule as my 2nd image. but after closing the padlock on policy on AK, it is show like your image. it is in my 4th image. but after that applications are getting blocked.

This post has been edited by manawa: 6.09.2011 16:55


--------------------
Kaspersky Lab Certified Data Security Technician

Avian - Kaspersky Lab's Sri Lanka\Maldives Distributor www.avian.lk
Go to the top of the page
 
+Quote Post
enkryptor
post 7.09.2011 10:26
Post #5


Tester
*************

Group: KL Russia
Posts: 4926
Joined: 22.09.2008




Am I right — you installed KSC 9.0.2743 and then KES 8.1.0.524 to clean vmware systems?

did you install KES manually or remotely via KSC ?
Go to the top of the page
 
+Quote Post
manawa
post 7.09.2011 12:02
Post #6


Advanced Member II
****

Group: Public Testers
Posts: 309
Joined: 25.09.2007
From: Sri Lanka




QUOTE(enkryptor @ 7.09.2011 11:56) *
Am I right — you installed KSC 9.0.2743 and then KES 8.1.0.524 to clean vmware systems?

did you install KES manually or remotely via KSC ?



dear enkryptor,

I installed KSC 9.0.2756 & KES 8.1.0.557 on clean vmware system. i installed KES manually.


--------------------
Kaspersky Lab Certified Data Security Technician

Avian - Kaspersky Lab's Sri Lanka\Maldives Distributor www.avian.lk
Go to the top of the page
 
+Quote Post
enkryptor
post 7.09.2011 16:49
Post #7


Tester
*************

Group: KL Russia
Posts: 4926
Joined: 22.09.2008




It's really strange. I installed KES manually, then applied a policy to it, but I still had three default rules... so I have no problems with "category is not defined"

Can you describe a little more detailed - you installed KES manually... what did you do next?
Go to the top of the page
 
+Quote Post
manawa
post 7.09.2011 17:31
Post #8


Advanced Member II
****

Group: Public Testers
Posts: 309
Joined: 25.09.2007
From: Sri Lanka




QUOTE(enkryptor @ 7.09.2011 18:19) *
It's really strange. I installed KES manually, then applied a policy to it, but I still had three default rules... so I have no problems with "category is not defined"

Can you describe a little more detailed - you installed KES manually... what did you do next?


1. i have installed KSC 9.0.2743 to server.
2. i have installed KES 8.1.0.557 to client manually with out netagent. all applications worked fine.
3. then i installed the network agent. after that policy was applied.
4. after that i reboot the client.
5. after login to client i got those blocking massages.

if you're say this can't be happend i'll do fresh install & come back to you.


--------------------
Kaspersky Lab Certified Data Security Technician

Avian - Kaspersky Lab's Sri Lanka\Maldives Distributor www.avian.lk
Go to the top of the page
 
+Quote Post
manawa
post 7.09.2011 21:20
Post #9


Advanced Member II
****

Group: Public Testers
Posts: 309
Joined: 25.09.2007
From: Sri Lanka




dear enkryptor,

After reinstalling softwares seems to be issue has been gone. b_punk.gif please see the image. but i don't know 1st time who was that happened. dash1.gif


Attached File(s)
Attached File  Untitled.jpg ( 106.19K ) Number of downloads: 19
 


--------------------
Kaspersky Lab Certified Data Security Technician

Avian - Kaspersky Lab's Sri Lanka\Maldives Distributor www.avian.lk
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic

 



Lo-Fi Version Time is now: 24.04.2014 23:29