CSA 4.0.3 Blocking Trend AV from updating

I just started a new job and the company I work for wanted to implement the devices they purchased from Cisco for the "Self Defending Network". I have several years experience with Cisco gear and started with the CSA.
The problem I am having is that CSA 4.0.3 is using the trojan detection rules to stop the execution of Antivirus updates from Trend. I ran through the rules wizard to create an exception, but the CSA agent still prompts the user what they want to do. I don't want the user to be prompted when AV updates are installed, but I would like them to be prompted the rest of the time.
Any ideas?
Thanks

KCherry,
Hopefully before making changes to the original rules, you cloned them. I know many will agree that you will be better off cloning any group, policy and rule before making any changes to them.
Now you want to stop the prompt window for the AV detect/upgrade. Find the rule that is firing this and change the "Query User" to the "Deny" option. This will stop the message as well as deny this behavior. Also, make sure that this rule is still selected to "log" because you want to know if what you are going to do next will work. This may seem to impede what you want.
Go to the rule module that houses this rule. What you should do here is create a new rule. Write whatever you want in the description and put the "Take the following action" to "Allow." You'll want to log this to see if it is firing correctly. Select the application class you made for the AV.exe and select "$ALL files" for the "on any of these files" Go ahead and save and generate.
What this should do is place the rule you create above the deny rule that was prompting your users for action. With that, it should allow due to priority. Keep in mind that if this does not work take a look at your application class to make sure it is setup correctly.
If this is redundant to what everyone else was saying, sorry!

Similar Messages

  • Firefox blocks my page from updating - how do I enable updating?

    I like to have MSNBC and CNN open during the day when I am at work. For some reason, there is now a message saying that Firefox has blocked the page from updating and I have to constantly click "Allow" for it to update. I have tried to right click to "Always allow" but that is not an option. I have gone to "Options" but I cannot find a way to always allow updating.

    That's a security feature in Firefox.
    Use this extension to add the necessary permissions to Firefox - Allow Clipboard Helper: <br />
    https://addons.mozilla.org/en-US/firefox/addon/852

  • Hi i am working on my web site and it appears to have blocked the ip from my server i can't open my web sites and i cant open the server home page but can do this on my iPhone i have trend micro running on 2 other desk tops all from the same router please

    Hi i am working on my web site and it appears to have blocked the ip from my server i can't open my web sites and i cant open the server home page but can do this on my iPhone i have trend micro running on 2 other desk tops all from the same router please help maybe its a firewall? Cheers Dave

    All I can suggest is that you open that file on the MBA and save it as a new file, then see if you can open the new one on the iMac.

  • How do I block a number from calling my iPhone

    How do I block a number from phoning or texting me on my iPhone. My Provider (Optus) say they cannot block a number. Has anyone been able to do this?

    the only other option if your carrier cant block the number is to pay to change your phone number.

  • How To Block a User From Changing Total Field In AR Invoice

    Hi all,
    I would like to find out how to block a user from being able to change the total field at the bottom right hand side of the AR Invoice.  Currently if a user creates an invoice and is still busy in that invoice they can adjust the total field which in turn will update the discount field as well.
    Is this simply an authorization issue or am I going to have to do it in the transaction notification?
    We are using SAP Business One PL 30 currently.

    Hi
    Please review by note again -This is by system design .
    I don't know why you are so worried abt this because by setting up discount max ,if user cannot post the document ,that means it is not in the system ,no matter they change multiple times in the fields .
    But I think your scenario is different ,
    You are copying with certain discount from Delivery to AR invoice and i think you don't want user to change the discount field , then you can solve your issue by using approval or sp_notification
    If you really want it to be greyed out ,I think you might have to go through by SDK or Boyum addon.
    Thank you
    Bishal

  • How to block a page (from a business job searching website) from appearing on my screen without me searching for it?

    How to block a page (from a business job searching website) from appearing on my screen without me searching for it?

    Look under:
    System preferences > Network > WiFi > ( Advanced ) > DNS
    System Preferences > Network > Ethernet > ( Advanced ) > DNS
    There should be two or more IP addresses there.
    Those addresses should be EXACTLY the ones your current ISP provided when you signed up for service. They do not start with 85 or 86 -- those are hacker sites.
    If you are in the US, you could also use OpenDNS:
    208.67.222.222
    208.67.220.220

  • How do I block this msg from always popping up "iTunes requires Safari 4.0.3 or later to be installed to use the iTunes Store within iTunes. Use Software Update to download and install the latest version of Safari" bc I can't download the latest software?

    How do I block this msg from always popping up "iTunes requires Safari 4.0.3 or later to be installed to use the iTunes Store within iTunes. Use Software Update to download and install the latest version of Safari". I cannot download this software bc my lap top is to old. The msg literally pops up everytime I make any moves on itunes and is VERY annoying.

    I have a 2006 MacBook with an Mac OS X version 10.5.
    In that case, try downloading a Safari 5.0.5 for leopard from the following location:
    http://www.apple.com/safari/download/

  • How can I block a url from accessing my browser?

    I want to block a url from accessing my browser. The url in question, djbsaqja.co.cc, flashed a pop-up saying that my computer was infected with a dangerous virus and that "Windows Security" required that I download a program to fix it.
    I maintain realtime virus protection, but ran a manual scan anyway, which proved that I was clean.
    The url listed above would not let me out of an unending chain of popups, demanding that I download their tool.
    Instead, I opened a new Firefox session (it was the only way I could re-enter Firefox without this rogue url taking control), then cleared out my history, cache and cookies.
    I'm clean...and now I'm back in control with, I believe, no damage. But since I wrote down the url, is there a way that I can block from accessing my browser again?
    Thanks for the help.

    You can add it to your hosts file - http://allthingsmarked.com/2006/08/28/howto-block-websites-using-the-hosts-file
    Sites like that pop up on a regular basis, but will often get taken down quite quickly. I have just checked and the site appears to have been taken down.

  • Is there a way for my daughter or her friends to block their numbers from showing up on activities page. At first i could see them, as of yesterday i can no longer see the numbers in the activities page. But i do see that she has texted them when looking

    Is there a way for my daughter or her friends to block their numbers from showing up on activities page. At first i could see them, as of yesterday i can no longer see the numbers in the activities page. But i do see that she has texted them when looking at her phone.

    First of all, there is no need to put the entire text of your post into the title of your thread.
    Next, does your daughter have an iPhone? Do her friends have iPhones? If the answer to both questions is "yes", then it is possible she is not texting them, but using iMessage to communicate with them. iMessages will not show up in the texting traffic on a line as they are not texts, but messages sent thru Apple's servers.
    For all "texts" to show up in the texting activity of an iPhone, you must disable iMessage on the device. Any messages sent as iMessages(blue bubbles around the text) on an iPhone will not show up in any texting activity.

  • When I open a link from another website ForeFox puts a messagge at the top of the new link saying that it has blocked the websiste from transferring me to a new

    When I open a link for another website Firefox opens a new tab but puts a line on the top of the new page saying that Firefox has blocked the website from transferring me to another page.
    I have to press ALLOW before Firefox will open the new page.
    How can I solve this problem.
    Many thanks in advance.

    hello betth007, in order to get effective help, please open a new question at https://support.mozilla.org/en-US/questions/new instead and include a bit more details about your issue (what kind of error message are you getting, etc.). thank you!

  • I used to have a duplicate apple id which I thought was gone but is now blocking me from updating apps,  How do I get rid of it since I no longer have a password for it?

    I used to have duplicate apple ids and I thought they got merged into one.  a few weeks ago the old one showed up in my Apps screen on my new iphone5 and is keeping me from updating all my apps and adding new ones.  I can't reset the password for it because it doesn't exist anymore.  Resetting my current apple ID has no effect on this old Apple ID and it continues to block my APPs application.  Anybody out there have a solution?  I have reset my phone more times than I can count to no avail. 

    App updates will always prompt with the Apple ID used to puchase those apps.  You also CANNOT merge Apple IDs.  What you can do:
    1) Delete those apps purchased w/ your previous Apple ID asking to be updated and purchase/download it with your current Apple ID.
    2) Contact Apple support to help you reset the password of your previous Apple ID then rename it with another email address of yours (active and shouldn't be another Apple ID) so you'll be able to do future app updates.
    3) Leave those apps not updated and just continue w/ your current Apple ID for your purchases.

  • How can i block PO adopt from PR with no release tab

    Dear Experts,
    I need to block PO creation ( by adoptation of PR) from PR which has no release tab active. Kindly help me how can i do this.
    From unreleased PR , PO can not be created and it is standard SAP function. But if PR has no release tab then PO can be created from that PR and no error or warning is there. But i need to block PO creaation from the PR which as no released tab active.
    Please help.
    Kind regards,
    Zusen

    Hi Zusen,
    Would not be good idea to place those PRs in release strategy? In this way PO(s) will not be created until PR(s) is released. Have a look at release strategy of PR under the path; IMG-Materials Management-Purchasing-Purchase Requisition-Release Procedure
    Otherwise you have to develop some coding. You can use BADI: ME_PROCESS_PO in order to control unreleased PR. If EBAN-FRGRL is NULL in PO then you can place an error message as you want.
    Kind regards

  • MIRO - How to block all invoices from a certain vendor?

    Hi,
    I would like to block alll invoices from a certain vendor. In XK02 (change vendor) --> company code data --> payment transactions, I have tried a A and a * and a M in the field 'Payment Block', but it doens't make any difference.
    If I receive an invoice via MIRO with regards to a goods receipt it will never block the invoice if the IR = GR. The purpose is that for certain vendors invoices will always be blocked so that the procurement has to release this via MRBR.
    Any idea how to obtain this?
    Thanks a lot,
    Peter

    Dear Peter,
    I  would do the following to solve your requirement:
    Create Z-table ZVENDOR_BLOCK  with one field of type LIFNR. There I would maintain every supplier which you want his invoices to be blocked.
    Then I would customize a new Reason for Blocking invoice: (example: "X: Vendor Invoice Blocked by Default")
    Then I would implement BADI MRM_PAYMENT_TERMS   and there put the logic to determine if the particular invoice should be blocked.
    example code:
    --- fill all export-parameter always start with this -
      e_zfbdt = i_rbkpv-zfbdt.
      e_zbd1t = i_rbkpv-zbd1t.
      e_zbd1p = i_rbkpv-zbd1p.
      e_zbd2t = i_rbkpv-zbd2t.
      e_zbd2p = i_rbkpv-zbd2p.
      e_zbd3t = i_rbkpv-zbd3t.
      e_zlspr = i_rbkpv-zlspr. "Bloqueo de Factura
    data: v_lifnr type lifnr.
    select single lifnr
            into v_lifnr
            from ZVENDOR_BLOCK
            where lifnr eq i_rbkpv-lifnr.
          if sy-subrc = 0.
             e_zlspr = 'X'.
           endif.
    Best Regards,
    SL

  • Move a block of text from one document to another

    How to make a script moving a block of text from a defined area to next document?

    Here is the beast.
    --[SCRIPT exportTextBlocks]
    Save the script as a Script, an Application or an Application Bundle: exportTextBlocks.xxx
    Move the newly created application into the folder:
    <startup Volume>:Users:<yourAccount>:Library:Scripts:Applications:Pages:
    Maybe you would have to create the folder Pages and even the folder Applications by yourself.
    select something in the source document
    menu Scripts > Pages > exportTextBlocks
    creates a new Pages document with the chunks of texts which where delimited by the markers.
    --=====
    The Finder's Help explains:
    To make the Script menu appear:
    Open the AppleScript utility located in Applications/AppleScript.
    Select the "Show Script Menu in menu bar" checkbox.
    --=====
    Yvan KOENIG (Vallauris, FRANCE)
    26 avril 2009
    --=====
    Here it would be easy to edit it if required
    property marker : "______"
    on run
    my activateGUIscripting()
    tell application "Pages" to tell document 1
    set nDocSource to name
    set source to body text
    end tell -- Pages
    set source to my decoupe(source, marker)
    set extraits to {}
    repeat with i from 1 to ((count of source) - 1) by 2
    copy item (i + 1) of source to end of extraits
    end repeat
    copy "" to end of extraits
    set extraits to my recolle(extraits, marker & return)
    set destName to dateTimeStamp() & ".pages"
    set destDoc to my makeNewPagesDoc(destName, path to documents folder as text)
    tell application "Pages"
    set body text of document destName to extraits (* inserts the extracted blocks *)
    save document destName
    my selectIworkDoc(name, nDocSource) (* back to source document *)
    end tell -- Pages
    end run
    --=====
    on decoupe(t, d)
    local l
    set AppleScript's text item delimiters to d
    set l to text items of t
    set AppleScript's text item delimiters to ""
    return l
    end decoupe
    --=====
    on recolle(l, d)
    local t
    set AppleScript's text item delimiters to d
    set t to l as text
    set AppleScript's text item delimiters to ""
    return t
    end recolle
    --=====
    on dateTimeStamp()
    return (do shell script "date " & quote & "+P%Y%m%d-%H%M%S" & quote)
    end dateTimeStamp
    --=====
    on makeNewPagesDoc(n, d)
    local f, t
    set f to d & n
    set t to ((path to applications folder as text) & "iWork '09:Pages.app:Contents:Resources:Templates:Blank.template:") as alias
    tell application "Pages"
    open t
    save document 1 as n in file f
    end tell -- Pages
    return d as alias
    end makeNewPagesDoc
    --=====
    Use GUI scripting
    on selectIworkDoc(a, n)
    local m
    if a = "Pages" then
    set m to 9
    else if a = "Numbers" then
    set m to 10
    else if a = "Keynote" then
    set m to 11
    else
    error "The application “" & a & "“ is not accepted !"
    end if
    tell application a to activate
    tell application "System Events" to tell application process a to tell menu bar 1 to tell menu bar item m to tell menu 1 to click menu item n
    end selectIworkDoc
    --=====
    on activateGUIscripting()
    tell application "System Events"
    if not (UI elements enabled) then set (UI elements enabled) to true (* to be sure than GUI scripting will be active *)
    end tell
    end activateGUIscripting
    --=====
    --[/SCRIPT]
    Yvan KOENIG (from FRANCE dimanche 26 avril 2009 22:32:24)

  • How do I defeat or whitelist the "Firefox has blocked this site from loading another web page" function?

    Often when I click a link within a web page, a message bar appears at the top of the page saying "Firefox has blocked this site from loading another page" or something similar. This happens frequently on banking or credit card sites. This is particularly annoying because it seems to disturb the operation of the link when I have to click the "Allow" box on the message bar. I would prefer to create a whitelist for this feature so it would not interrupt my banking operations. Failing that, I would like to know how to toggle the feature on and off. Failing that, I would like to know how to defeat the function.

    See:
    *Firefox > Options/Preferences > Advanced > General : Accessibility : [ ] "Warn me when web sites try to redirect or reload the page"
    The setting in "Options > Advanced > General" is meant as an accessibility feature, as you can see by the label of that section, so that people with disabilities or people who use screen readers do not get confused and is not meant as a safety protection to stop redirecting.
    See also:
    *https://support.mozilla.org/kb/settings-network-updates-and-encryption#w_general-tab
    *http://kb.mozillazine.org/accessibility.blockautorefresh
    *http://kb.mozillazine.org/Accessibility_features_of_Firefox

Maybe you are looking for