Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Configuring approved or blocked programs in OfficeScan 10.6 Behavior Monitoring

    • Updated:
    • 17 Jul 2014
    • Product/Version:
    • OfficeScan 10.6
    • Platform:
    • Windows 2003 Enterprise
    • Windows 2003 Enterprise 64-bit
    • Windows 2003 Standard
    • Windows 2003 Standard 64-bit
    • Windows 2008 Enterprise
    • Windows 2008 Server Core
    • Windows 2008 Standard
    • Windows 2012 Enterprise
    • Windows 2012 Web Server Edition
    • Windows 7 32-bit
    • Windows 7 64-bit
    • Windows 8 32-bit
    • Windows 8 64-bit
    • Windows Vista 32-bit
    • Windows Vista 64-bit
    • Windows XP Home
    • Windows XP Professional
    • Windows XP Professional 64-bit
Summary
Block or allow specific applications or executables using the OfficeScan Behavior Monitoring feature.
Details
Public
To allow or block executables or applications, you need to configure the exceptions list by specifying the following:
  • Approved Programs: An approved program will still be checked by other OfficeScan features such as file-based scanning before it is allowed to run. 
  • Blocked Programs: Programs in this list can never be started. To configure this list, Event Monitoring should be enabled.
Do the following:
  1. Log in to the OfficeScan management console and go to Networked Computers > Client Management.
  2. In the client tree, select specific domains or clients, or click the root domain icon to include all clients.
  3. Click Settings Behavior Monitoring Settings.
  4. Select Enable Malware Behavior Blocking.
  5. Configure Event Monitoring settings:
    1. Select Enable Event Monitoring.
    2. Choose the system events to monitor and select an action for each one. For information about monitored system events and actions, refer to Event Monitoring.
  6. Configure the exception list:
    1. In Enter Program Full Path field, type the full path of the program to approve or block. Separate multiple entries with a semi-colon (;). The exception list supports UNC paths.
    2. Click one of the following:
      • Approve Programs
      • Block Programs
      Notes:
      • OfficeScan accepts a maximum of 100 approved programs and 100 blocked programs.
      • To remove a blocked or approved program from the list, click the trash bin icon next to the program.
  7. Do one of the following:
    • If you selected domain(s) or client(s) in the client tree, click Save.
    • If you clicked the root domain icon, choose from the following options:
      • Apply to All Clients: Applies settings to all existing clients and to any new client added to an existing/future domain. Future domains are domains not yet created at the time you configured the settings.
      • Apply to Future Domains Only: Applies settings only to clients added to future domains. This option will not apply settings to new clients added to an existing domain.
Premium
Internal
Rating:
Category:
Configure; Troubleshoot
Solution Id:
1095359
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.