There had been issues with iPass Open Mobile when the OfficeScan NT Proxy service is running. As a workaround, the four iPass processes are configured in the Whitelist on the OfficeScan server and deployed to the OfficeScan clients.
- Open the ofcscan.ini file under ..\Program Files\Trend Micro\OfficeScan\PCCSRV.
- Add the following parameters under the [Global Setting] section:
SEG_WhiteListProcNum=4
SEG_WhiteListProc0=iMobility.exe
SEG_WhiteListProc1=iMobilityService.exe
SEG_WhiteListProc2=iPlatformHost.exe
SEG_WhiteListProc3=iPlatformService.exe - Save and close the file.
- Log on to the OfficeScan server management console and go to Networked Computers > Global Client Settings > click Save.
However, it is observed recently that after applying OfficeScan 10.0 Patch 2 for Service Pack 1, the users can no longer connect to the Internet again if the OfficeScan NT TMProxy server is running. When the service is disabled or stopped, the issue does not happen.
This issue happens because of a side effect introduced in a hot fix that was included in OfficeScan 10.0 Patch 2 for SP1. After updating to Patch 2, the default value for "UseWhiteList" key is set to "0" if the key is not defined in the ofcscan.ini file on the server side. By default, the key does not exist in the ofcscan.ini file.
To correctly whitelist the iPass Open Mobile processes, do one of the following:
Option 1: Set the "UseWhiteList" value to "1"
- Go to the OfficeScan server installation directory and open the \PCCSRV\ofcscan.ini file using a text editor.
- Add the following key under the [Global Setting] section and assign the appropriate value:
UseWhiteList=1
Where "1" means enabling the TMProxy approved processes list.
- Save and close the file.
- Log on to the OfficeScan server management console.
- Go to Networked Computers > Global Client Settings.
- Click Save to deploy the changes to the OfficeScan clients.
The OfficeScan client will set the UseWhiteList value to 1. You can verify this in the client registry. Check the value of the UseWhiteList in the HKEY_LOCAL_MACHINE\SOFTWARE\ TrendMicro\NSC\TmProxy\WhiteList registry key.
Option 2: Apply Hot Fix 2864
Hot Fix 2864 has been released to address this issue. It enables the TmProxy approved processes list deployment feature by default.
Refer to the Readme file for more information. Request the hot fix from Trend Micro Technical Support or from your Technical Account Manager (TAM).
