Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Approving IronKey

Approving IronKey

Version

6.0.x and 7.x

 

Issue

Receiving an execution block for ironkey.exe and dll file from iksecurebackup folder even when the USB device is already approved on Device Rules.

 

Symptoms

Receiving an execution block for ironkey.exe and dll file from iksecurebackup.

 

Cause

A custom rule is needed.

 

Solution

Create the following custom rule:

 

Rule Type:

Execute Control

 

Execute Action:

Allow

 

Path or File:

*\device\cdrom*\ironkey.exe

*\ironkey-system-files\iksecurebackup\*.dll

*:\windows\qtcore4.dll

 

Process:

Any

 

Important Note(s)

Try applying this on a test policy first before applying it to everyone.

Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎08-06-2015
Views:
394
Contributors