10: How must I configure my Anti-virus to work with PolicyPak CSE?

Some Antivirus engines need to be told to EXCLUDE some PolicyPak items.

PolicyPak acts as part of the operating system, and as such, can occasionally conflict with SOME Antivirus programs. (McAfee, Sophos etc.)

We suggest if you find a problem to exclude

PPWatcherSvc*.exe (with * being either the 32- or 64-bit version)

PPExtensionService.exe (with * being either the 32- or 64-bit version)

which could be blocked and prevented from performing its job.

You might need to further expand the exclusion to

1. %Programdata%\PolicyPak.
2. %localappdata%\PolicyPak

then… for 32-bit machines:

1. c:\Program Files\PolicyPak
2. C:\ProgramData\PolicyPak

then .. for 64-bit machines:

c:\program files (x86)\PolicyPak
*AND*
c:\Program Files\PolicyPak
C:\ProgramData\PolicyPak

To cover all the bases please also exclude PPWatchersvc64.exe and PPWatchersvc32.exe from the Exploit Mitigation feature.

SOPHOS CUSTOMERS:

Check the Event details and then make an exception in the Exploit Protection setting. 

  • 270
  • 08-Jul-2020
  • 2183 Views