Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Configuring Tmproxy Whitelist to exclude application processes from Web Reputation Service (WRS) scanning

    • Updated:
    • 17 Oct 2016
    • Product/Version:
    • OfficeScan 10.6
    • OfficeScan 11.0
    • OfficeScan XG.All
    • Platform:
    • Windows 2000 Advanced Server
    • Windows 2000 Datacenter Server
    • Windows 2000 Professional
    • Windows 2000 Server
    • Windows 2000 Small Business Server
    • Windows 2003 Compute Cluster Server
    • Windows 2003 Datacenter Server
    • Windows 2003 Datacenter Server Edition 64-bit
    • Windows 2003 Enterprise Server
    • Windows 2003 Home Server
    • Windows 2003 Small Business Server
    • Windows 2003 Standard Server Edition
    • Windows 2003 Standard Server Edition 64-bit
    • Windows 2003 Storage Server
    • Windows 2003 Web Server Edition
    • Windows 2008 Datacenter Server
    • Windows 2008 Datacenter Server Edition 64-bit
    • Windows 2008 Enterprise Server
    • Windows 2008 Enterprise Server Edition 64-bit
    • Windows 2008 Essential Business Server
    • Windows 2008 Small Business Server
    • Windows 2008 Standard Server Edition
    • Windows 2008 Standard Server Edition 64-bit
    • Windows 2008 Storage Server
    • Windows 2008 Web Server Edition
    • Windows 2008 Web Server Edition 64-bit
    • Windows 7 32-bit
    • Windows 7 64-bit
    • Windows Vista 32-bit
    • Windows Vista 64-bit
    • Windows XP Home
    • Windows XP Professional
    • Windows XP Professional 64-bit
Summary

Web Reputation Service (WRS) can protect you from malicious web sites. In OfficeScan web console, we can set URLs as whitelist target. Learn how to set whitelist using process name.

Note that any traffic from the specified process will not be scanned by WRS.

Details
Public

To enable the approved TMProxy Process Whitelist Deployment feature:

  1. On the OfficeScan server installation directory, go to the \PCCSRV\ folder and open the ofcscan.ini file using a text editor.
  2. Under the [Global Setting] section, add the following keys and assign the appropriate value:

    [Global Setting]
    SEG_WhiteListProcNum=x, where x is the number of approved processes, maximum is "10"

    SEG_WhiteListProc0=ABC.exe
    SEG_WhiteListProc1=DEF.exe
    ...
    SEG_WhiteListProc9=XYZ.exe
    Where "ABC.exe", "DEF.exe", and "XYZ.exe" are user-approved process names.

  3. Save and close the file.
  4. Log in to the OfficeScan server management console.
  5. Do one of the following to access the Global Client/Agent Settings:
    • For OSCE 10.6 and below, navigate to Networked Computers > Global Client Settings.
    • For OSCE 11.0, navigate to Agents > Global Agents Settings.
  6. Click Save to deploy the settings to the clients.
  7. Restart the Trend Micro OfficeScan NT Proxy Service or OfficeScan NT Proxy on the client computers or restart the computers to apply the registry settings.

Select your OfficeScan version to see the registry keys that will be installed after the global settings deployment.

  • For machines before Windows 8 desktops and Windows 2012 Servers:

    [HKLM\SOFTWARE\TrendMicro\NSC\TmProxy\WhiteList]
    SEG_WhiteListProcNum=x
    SEG_WhiteListProc0=ABC.exe
    SEG_WhiteListProc1=DEF.exe
    SEG_WhiteListProc9=XYZ.exe

    Where x is the number of approved processes. The maximum is 10.

    The following installed subkeys are based on the number of processes that you specified in the "SEG_WhiteListProcNum" key.

    [HKLM\SOFTWARE\TrendMicro\NSC\TmProxy\WhiteList\ABC]
    Name: ProcessImageName
    Type: REG_SZ
    Data: ABC.exe

    [HKLM\SOFTWARE\TrendMicro\NSC\TmProxy\WhiteList\DEF]
    Name: ProcessImageName
    Type: REG_SZ
    Data: DEF.exe

  • For Windows 8 desktops and higher and Windows 2012 servers and higher:

    [HKLM\SOFTWARE\TrendMicro\Osprey\WhiteList]
    SEG_WhiteListProcNum=x  
    SEG_WhiteListProc0=ABC.exe 
    SEG_WhiteListProc1=DEF.exe 
    SEG_WhiteListProc9=XYZ.exe 

    Where x is the number of  approved processes. The maximum is 10.

    The following installed subkeys are based on the number of processes that you specified in the "SEG_WhiteListProcNum" key.

    [HKLM\SOFTWARE\TrendMicro\Osprey\WhiteList\ABC]
    Name: ProcessImageName
    Type: REG_SZ
    Data: ABC.exe

    [HKLM\SOFTWARE\TrendMicro\Osprey\WhiteList\DEF]
    Name: ProcessImageName
    Type: REG_SZ
    Data: DEF.exe

  • For machines before Windows 7 desktops and Windows 2012 Servers:

    [HKLM\SOFTWARE\TrendMicro\NSC\TmProxy\WhiteList]
    SEG_WhiteListProcNum=x 
    SEG_WhiteListProc0=ABC.exe 
    SEG_WhiteListProc1=DEF.exe  
    SEG_WhiteListProc9=XYZ.exe

    Where x is the number of approved processes. The maximum is 10.

    The following installed subkeys are based on the number of processes that you specified in the "SEG_WhiteListProcNum" key.

    [HKLM\SOFTWARE\TrendMicro\NSC\TmProxy\WhiteList\ABC]
    Name: ProcessImageName
    Type: REG_SZ
    Data: ABC.exe

    [HKLM\SOFTWARE\TrendMicro\NSC\TmProxy\WhiteList\DEF]
    Name: ProcessImageName
    Type: REG_SZ
    Data: DEF.exe

  • For Windows 7 desktops and higher and Windows 2012 servers and higher:

    [HKLM\SOFTWARE\TrendMicro\Osprey\WhiteList]
    SEG_WhiteListProcNum=x 
    SEG_WhiteListProc0=ABC.exe 
    SEG_WhiteListProc1=DEF.exe 
    SEG_WhiteListProc9=XYZ.exe 

    Where x is the number of  approved processes. The maximum is 10.

    The following installed subkeys are based on the number of processes that you specified in the "SEG_WhiteListProcNum" key.

    [HKLM\SOFTWARE\TrendMicro\Osprey\WhiteList\ABC]
    Name: ProcessImageName
    Type: REG_SZ
    Data: ABC.exe

    [HKLM\SOFTWARE\TrendMicro\Osprey\WhiteList\DEF]
    Name: ProcessImageName
    Type: REG_SZ
    Data: DEF.exe

  • For machines before Windows 7 desktops and Windows 2008 R2 Servers:

    [HKLM\SOFTWARE\TrendMicro\NSC\TmProxy\WhiteList]
    SEG_WhiteListProcNum=x
    SEG_WhiteListProc0=ABC.exe
    SEG_WhiteListProc1=DEF.exe
    SEG_WhiteListProc9=XYZ.exe

    Where x is the number of approved processes. The maximum is 10.

    The following installed subkeys are based on the number of processes that you specified in the "SEG_WhiteListProcNum" key.

    [HKLM\SOFTWARE\TrendMicro\NSC\TmProxy\WhiteList\ABC]
    Name: ProcessImageName
    Type: REG_SZ
    Data: ABC.exe

    [HKLM\SOFTWARE\TrendMicro\NSC\TmProxy\WhiteList\DEF]
    Name: ProcessImageName
    Type: REG_SZ
    Data: DEF.exe

  • For Windows 7 desktops and higher and Windows 2008 R2 servers and higher:

    [HKLM\SOFTWARE\TrendMicro\Osprey\WhiteList]
    SEG_WhiteListProcNum=x
    SEG_WhiteListProc0=ABC.exe
    SEG_WhiteListProc1=DEF.exe
    SEG_WhiteListProc9=XYZ.exe

    Where x is the number of approved processes. The maximum is 10.

    The following installed subkeys are based on the number of processes that you specified in the "SEG_WhiteListProcNum" key.

    [HKLM\SOFTWARE\TrendMicro\Osprey\WhiteList\ABC]
    Name: ProcessImageName
    Type: REG_SZ
    Data: ABC.exe

    [HKLM\SOFTWARE\TrendMicro\Osprey\WhiteList\DEF]
    Name: ProcessImageName
    Type: REG_SZ
    Data: DEF.exe

Premium
Internal
Rating:
Category:
Configure; Troubleshoot
Solution Id:
1057771
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.