11.2 Behavior Detection breaks Applications writing to shared drives

[adrianh]

Just a warning we now have two applications in house that cant overwrite files on network shares/mapped drives with this option enabled.  Disabling “Protection of shared folders against external encryption” removes the problem as I worked with support on this case  INC000011020891.  Working on traces/log collection but I am very hesitant to disable this important feature. Anyone else?

[Alf76]

Today I noticed similar problem like yours.

Users of our accounting software they had problem to generate some reports in this sw. These reports are generated to mapped drives / shared folder.
I didn´t have enough time to solve it, the only thing, which helped was to dissable the kaspersky antivirus. So as an temporary workaround we decided to deploy the earlier version v10 of Kaspersky Endpoint Security :(

I see now, that we are not alone!
https://community.kaspersky.com/produkty-kaspersky-dlya-biznesa-31/kes-11-2-blokiruet-programmu-5805
 

Don´t upgrade to the new  version 11.2.0.2254 !!! :(

[PeterVanlaeken]

Same problem here!

Overwriting a file in a mapped drive is blocked without notice.

Writing is not a problem.

 

[Nikolay Arinchev]

Hi,

INC000011020891 is under investigation now.

Please await for an answer within the incident.

Thank you for cooperation!

[adrianh]

Further to this another option which i am using from support is to trust the path/application in the policy/general settings/exclusions/trusted apps.  This works for now and should be much better than disabling the protection above!

[ak01]

we have the same issues.

If you have a fix, I can test it (would test it).

INC000011059789

[EDDI]

I concur. Since 11.2 and with Behaviour Detection protection for file shares enabled, we have 2 apps, that can create files, but cannot write data to them. Exception being files around 2 KB or smaller.

[ak01]

pf6008 solves our issues (see also other topic).

[adimondo]

Similar problem here.  What did you all end up doing to address the issue?  Is there a new release somewhere with a fix?  I’d also be happy to test that the fix works as expected.

[Guest #37]

@adimondo 

Hi,

Please open a support ticket in the Company Account, send gsi and traces for review.

Regards

[ak01]

Hi

you should request the private fix pf6008 using the mentioned Company Account Portal.

[Juannybennett]

Can a solution not be posted on this thread to save us unnecessary time and effort?

[Guest #37]

@Juannybennett

You have to open a support ticket in the Kaspersky Company Account for receive a private patch. Is the only way to receive private patchs.

Or try with KES v11.3.

Regards

[alexcad]

Can a solution not be posted on this thread to save us unnecessary time and effort?

It’s also fixed with KES11.3 or CF1 for KES11.2 
https://support.kaspersky.com/15356

regards
alex