IPB

Welcome Guest ( Log In | Register )

 
Reply to this topicStart new topic
> connection_detection [In progress], connection_alert_without_device_connected
Casimir
post 19.05.2017 13:04
Post #1


Member
**

Group: Members
Posts: 17
Joined: 24.04.2017




Hello,

We set a GPO forbiding usb device, and smartcard connection on several computers.
But without any smartcard connected, several users computer popped an alert. This alert says a smartcard connection is forbidden and has been stopped.
One quarter of a team got impacted. Half of them got the alert friday between 1-2 pm and the rest monday between 0-1pm.(Those from the monday didn't connect the friday.) Also the alert only occured once.
Computers are laptop running under windows7, they're HP640G1 and HP6470B.
Do you have any ideas about the reason of this alert?


Thank you a lot.
Regards.
Attached File(s)
Attached File  screens.zip ( 143,52K ) Number of downloads: 2
 
Go to the top of the page
 
+Quote Post
Konstantin Anton...
post 19.05.2017 17:16
Post #2


Technical Support Engineer
*************

Group: KL Russia
Posts: 3759
Joined: 2.12.2015




QUOTE(Casimir @ 19.05.2017 12:04) *
Hello,

We set a GPO forbiding usb device, and smartcard connection on several computers.
But without any smartcard connected, several users computer popped an alert. This alert says a smartcard connection is forbidden and has been stopped.
One quarter of a team got impacted. Half of them got the alert friday between 1-2 pm and the rest monday between 0-1pm.(Those from the monday didn't connect the friday.) Also the alert only occured once.
Computers are laptop running under windows7, they're HP640G1 and HP6470B.
Do you have any ideas about the reason of this alert?
Thank you a lot.
Regards.

Hi,

Could you please specify versions that you use.

Thank you!


--------------------
In english: GSI report | AVZ report | KSC10 Traces | KES10 Traces | KSC9 Traces | KES8 Traces(RUS) | klnagchk log(RUS)
На русском: Отчет GSI | Лог AVZ | Трассировки KSC10 | Трассировки KES10 | Трассировки KSC9 | Трассировки KES8 | Отчет утилиты klnagchk

Please evaluate support help by using "Rating" option!
Пожалуйста, оцените оказанную помощь, используя опцию "Rating" в названии топика!
Go to the top of the page
 
+Quote Post
Casimir
post 22.05.2017 13:30
Post #3


Member
**

Group: Members
Posts: 17
Joined: 24.04.2017




QUOTE(Konstantin Antonov @ 19.05.2017 15:16) *
Hi,

Could you please specify versions that you use.

Thank you!


Hello,

The agent version is 10.2.434 for all computers.
The protection version are 10.2.4.674 and 10.2.5.3201.

Thank you
Go to the top of the page
 
+Quote Post
Ivan Ponomarev
post 22.05.2017 13:42
Post #4


Technical Support Engineer
********

Group: KL Russia
Posts: 1399
Joined: 8.07.2016
From: Москва




QUOTE(Casimir @ 22.05.2017 12:30) *
Hello,

The agent version is 10.2.434 for all computers.
The protection version are 10.2.4.674 and 10.2.5.3201.

Thank you


Hello!

Please describe, how exactly was set up this rule?

Thanks!


--------------------
In english: GSI report | AVZ report | KSC10 Traces | KES10 Traces | KSC9 Traces | KES8 Traces(RUS) | klnagchk log(RUS)
На русском: Отчет GSI | Лог AVZ | Трассировки KSC10 | Трассировки KES10 | Трассировки KSC9 | Трассировки KES8 | Отчет утилиты klnagchk

Please evaluate support help by using "Rating" option!
Пожалуйста, оцените оказанную помощь, используя опцию "Rating" в названии топика!
Go to the top of the page
 
+Quote Post
Casimir
post 22.05.2017 18:30
Post #5


Member
**

Group: Members
Posts: 17
Joined: 24.04.2017




QUOTE(Ivan Ponomarev @ 22.05.2017 11:42) *
Hello!

Please describe, how exactly was set up this rule?

Thanks!


Hello,

I don't know if I fully understand your question so my answer might be incorrect.

It's a protection strategy applied on a group.
The computers also are FDE encrypted.
I send screens of endpoint control parameters from the strategy.

Thank you.

Attached File(s)
Attached File  sreens_endpoint_control.zip ( 271,99K ) Number of downloads: 2
 
Go to the top of the page
 
+Quote Post
Ivan Ponomarev
post 22.05.2017 19:11
Post #6


Technical Support Engineer
********

Group: KL Russia
Posts: 1399
Joined: 8.07.2016
From: Москва




QUOTE(Casimir @ 22.05.2017 17:30) *
Hello,

I don't know if I fully understand your question so my answer might be incorrect.

It's a protection strategy applied on a group.
The computers also are FDE encrypted.
I send screens of endpoint control parameters from the strategy.

Thank you.


I see.

Let me clarify the problem.

The main issue is that on several machines you see, that smartcard reader use was blocked, although these are not used at all and are blocked, right?

Thanks!


--------------------
In english: GSI report | AVZ report | KSC10 Traces | KES10 Traces | KSC9 Traces | KES8 Traces(RUS) | klnagchk log(RUS)
На русском: Отчет GSI | Лог AVZ | Трассировки KSC10 | Трассировки KES10 | Трассировки KSC9 | Трассировки KES8 | Отчет утилиты klnagchk

Please evaluate support help by using "Rating" option!
Пожалуйста, оцените оказанную помощь, используя опцию "Rating" в названии топика!
Go to the top of the page
 
+Quote Post
Casimir
post 23.05.2017 12:50
Post #7


Member
**

Group: Members
Posts: 17
Joined: 24.04.2017




QUOTE(Ivan Ponomarev @ 22.05.2017 17:11) *
I see.

Let me clarify the problem.

The main issue is that on several machines you see, that smartcard reader use was blocked, although these are not used at all and are blocked, right?

Thanks!


Hello,

Yes you're right.

Thank you!
Go to the top of the page
 
+Quote Post
Konstantin Anton...
post 23.05.2017 15:39
Post #8


Technical Support Engineer
*************

Group: KL Russia
Posts: 3759
Joined: 2.12.2015




QUOTE(Casimir @ 23.05.2017 11:50) *
Hello,

Yes you're right.

Thank you!

Hi,

Could you please install the latest KES SP2 version and try to reproduce the issue.

Thank you!


--------------------
In english: GSI report | AVZ report | KSC10 Traces | KES10 Traces | KSC9 Traces | KES8 Traces(RUS) | klnagchk log(RUS)
На русском: Отчет GSI | Лог AVZ | Трассировки KSC10 | Трассировки KES10 | Трассировки KSC9 | Трассировки KES8 | Отчет утилиты klnagchk

Please evaluate support help by using "Rating" option!
Пожалуйста, оцените оказанную помощь, используя опцию "Rating" в названии топика!
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic

 



Lo-Fi Version Time is now: 26.05.2017 09:34