Solved: Block file by hash

tamaszoltan · ‎04-25-2018

Hello,

Is it possible to block files by file hash somehow on the ESA?

Thanks!

Regards,

Zoltan

Ken Stieers · ‎04-25-2018

If you're using AMP for Endpoints and have AMP for ESA, and are running ESA 11.1.0, you can tie your ESA to your AMP for Endpoints console, and set its policy to get any custom detections you have set up in your AMP console.

This is coming for WSA too, eventually.

View solution in original post

SriramV · ‎04-25-2018

Not for now.

Ken Stieers · ‎04-25-2018

If you're using AMP for Endpoints and have AMP for ESA, and are running ESA 11.1.0, you can tie your ESA to your AMP for Endpoints console, and set its policy to get any custom detections you have set up in your AMP console.

This is coming for WSA too, eventually.

tamaszoltan · ‎04-26-2018

Hi,

Thanks for your response.

Regards,

Zoltan