Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

OfficeScan NT TMProxy service prevents iPass users from connecting to the Internet

    • Updated:
    • 17 Oct 2016
    • Product/Version:
    • OfficeScan 10.6
    • OfficeScan 11.0
    • OfficeScan XG.All
    • Platform:
    • Windows 7 32-bit
    • Windows 7 64-bit
    • Windows XP Professional
    • Windows XP Professional 64-bit
Summary

There had been issues with iPass Open Mobile when the OfficeScan NT Proxy service is running. As a workaround, the four iPass processes are configured in the Whitelist on the OfficeScan server and deployed to the OfficeScan clients.

  1. Open the ofcscan.ini file under ..\Program Files\Trend Micro\OfficeScan\PCCSRV.
  2. Add the following parameters under the [Global Setting] section:

    SEG_WhiteListProcNum=4
    SEG_WhiteListProc0=iMobility.exe
    SEG_WhiteListProc1=iMobilityService.exe
    SEG_WhiteListProc2=iPlatformHost.exe
    SEG_WhiteListProc3=iPlatformService.exe

  3. Save and close the file.
  4. Log on to the OfficeScan server management console and go to Networked Computers > Global Client Settings > click Save.

However, it is observed recently that after applying OfficeScan 10.0 Patch 2 for Service Pack 1, the users can no longer connect to the Internet again if the OfficeScan NT TMProxy server is running. When the service is disabled or stopped, the issue does not happen.

Details
Public

This issue happens because of a side effect introduced in a hot fix that was included in OfficeScan 10.0 Patch 2 for SP1. After updating to Patch 2, the default value for "UseWhiteList" key is set to "0" if the key is not defined in the ofcscan.ini file on the server side. By default, the key does not exist in the ofcscan.ini file.

To correctly whitelist the iPass Open Mobile processes, do one of the following:

Option 1: Set the "UseWhiteList" value to "1"

  1. Go to the OfficeScan server installation directory and open the \PCCSRV\ofcscan.ini file using a text editor.
  2. Add the following key under the [Global Setting] section and assign the appropriate value:

    UseWhiteList=1

    Where "1" means enabling the TMProxy approved processes list.

  3. Save and close the file.
  4. Log on to the OfficeScan server management console.
  5. Go to Networked Computers > Global Client Settings.
  6. Click Save to deploy the changes to the OfficeScan clients.

The OfficeScan client will set the UseWhiteList value to 1. You can verify this in the client registry. Check the value of the UseWhiteList in the HKEY_LOCAL_MACHINE\SOFTWARE\ TrendMicro\NSC\TmProxy\WhiteList registry key.

 
Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.

Option 2: Apply Hot Fix 2864

Hot Fix 2864 has been released to address this issue. It enables the TmProxy approved processes list deployment feature by default.

Refer to the Readme file for more information. Request the hot fix from Trend Micro Technical Support or from your Technical Account Manager (TAM).

Premium
Internal
Rating:
Category:
Troubleshoot
Solution Id:
1058117
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.