IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Approving IronKey

Approving IronKey

Version

6.0.x and 7.x

 

Issue

Receiving an execution block for ironkey.exe and dll file from iksecurebackup folder even when the USB device is already approved on Device Rules.

 

Symptoms

Receiving an execution block for ironkey.exe and dll file from iksecurebackup.

 

Cause

A custom rule is needed.

 

Solution

Create the following custom rule:

 

Rule Type:

Execute Control

 

Execute Action:

Allow

 

Path or File:

*\device\cdrom*\ironkey.exe

*\ironkey-system-files\iksecurebackup\*.dll

*:\windows\qtcore4.dll

 

Process:

Any

 

Important Note(s)

Try applying this on a test policy first before applying it to everyone.

Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎08-06-2015
Views:
601
Contributors