cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
361
Views
0
Helpful
3
Replies

CSA 4.x blocking but no wizard available

jimmahoney99
Level 1
Level 1

The issue I'm having is the help desk is using goto assist. csa is showing a warning and blocking. normally there is a wizard tab after the rule that was triggered. that i usually run to allow a application to run. so now instead i went into the rule "rule 1012 Trojan detection) and go to the area with check box (accessing system functions from code executing in data or stack space) and then i highlight a application class to exclude and then i goto that application class file set and add the executable that give the error. In theory it should work am i missing something

Thanks for any help

Jim2k

3 Replies 3

tsteger1
Level 8
Level 8

That should unless something else is superceding it.

My CSA 4.x is a bit rusty but I recall creating application classes for each of the Trojan Detection categories and adding executables to those when I wanted them to be ignored.

Tom

so far i tried adding the executable to an application class and then execluding that class in the rule. i also tried creating a new App class and excluding that. any other ideas

The wizard will create an exception that is a separate trojan detection rule so you may want to look and see if there is more than one rule.

It may also stop presenting the wizard if there was already an exception created.

It's been a while since I used 4.x but I remember that particular rule being difficult to manage.

Tom

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: