Views:

Trend Micro Apex One and Trend Micro Apex Central does not support blocking MD5 hash values due to MD5 being an obsolete and insecure hashing algorithm. Attempts to add MD5 hashes for blocking will not succeed.


Supported Hash Types for Blocking

  • Trend Micro Apex One and Trend Micro Apex Central supports blocking hash values using SHA-1 and SHA-256 only.
  • If you attempt to use SHA-1 or SHA-256 and encounter issues, verify the correct format and product interface.

How to Block Supported Hash Values

Using Trend Micro Apex One Server Console

For more details, please refer to Blocking SHA-1 hash values.

Using Trend Micro Apex Central

  1. Log in to Trend Micro Apex Central.
  2. Go to Policies > Exceptions.
  3. Select the appropriate policy to edit.
  4. Under the Blocked List section, choose to add a new hash block.
  5. Input the SHA-1 or SHA-256 hash value.
  6. Save the policy to enforce the block.

For more information on hash blocking in Trend Micro Apex Central, refer to the Hash Values documentation.

Using Deep Security

  • If you require MD5 hash blocking, consider using Deep Security Application Control module, which supports MD5 hash blocking.
  • To pursue this, open a separate support case specifically for Deep Security.

How to Verify Blocked Supported Hash Values

  • After adding hash values, monitor the blocked list to confirm the entries are present.
  • Check endpoint logs to verify if threats matching the blocked hashes are detected and blocked.

If you experience any issues while adding SHA-1 or SHA-256 hashes or need assistance with Deep Security, please contact Trend Micro Support for further guidance.