ICS Application is blocked by TXOne StellarProtect ICS SafeGuard

TXOne - StellarOneAll , TXOne - StellarProtectAll

Last updated: 2022/03/18

Solution ID: KA-0012723

Category: Configure , Troubleshoot

ICS Application SafeGuard uses information collected in ICS Application Inventory to create protection rules such as:

PE Files (EXE and DLL) of ICS Application cannot be changed or deleted.
New PE files cannot be created, moved or copied in ICS Application's install folder.
Only process whose image file code-signed by a trusted ICS certificate is allowed to change, delete, copy or move protected PE files.
Since these are done automatically. Users cannot modify the mentioned protection rules.

This article provides the troubleshooting steps when ICS Application is not working and it may have been blocked by TXOne StellarProtect.

To resolve the issue:

Check the TXOne StellarProtect Agent Events in TXOne StellarOne.
Take note of the following details:
- Event ID – List of Events and their definition can be found on TXSP AG
- Event – Which specifies which feature performed the blocking as well as the file that was blocked
Since we have verified that the blocking was caused by ICS Application SafeGuard, in the interest of continuity of operations, you can temporarily turn it off via the TXOne StellarOne or TXOne StellarProtect console.
Use Configure Change Window. As mentioned before, block events can be caused by the changes on protected PE Files or creation of PE Files on the protected folder. If the ICS Application is about to undergo any software updates or anything may involve updating its files, we recommend enabling this feature before doing so.

After the changes has been made, disable the Change Window settings and enable ICS Application SafeGuard and check if the issue is resolved. Otherwise, continue disabling ICS Application SafeGuard.

Was this article helpful?