Jump to content

Recommended Posts

Hello,

Sage has always suggested excluding a list of proprietary file extensions from their real time threat protection when using their MAS product.

I am unable to add an extension to the ignore list in MBAM.  Ex:  *.m4t  Do you have any suggestions on accomplishing this?  The purpose is for performance.

Thanks,

Patr

Link to post
Share on other sites
  • Staff

No, these are separate products. MBMC is hosted on your own server and installs legacy MBAM (1.80) and MBAE (1.10). MBEP runs from a SaaS web portal and deploys our next-gen MB3, modified for use on business systems. Depending on which one you have, the approach will be different, and only MBEP supports exclusions via file extension directly.

Link to post
Share on other sites
  • Staff

That may be a problem, drive shares and UNC paths are not supported in MBMC's ignore list and there are known issues with the MBAM version in this product, its realtime function and applications that run from or write to drive shares. We have two workarounds for that, though success with them varies. 

First workaround is if the server hosting the share is DFS type, you can change the Access Based Enumeration (ABE) settings on the server hosting the share or application that runs from the share. As a test, you can you see if disabling ABE can help with the issue. To disable access-based enumeration using the Windows interface:

In the console tree, under the Namespaces node, right-click the appropriate namespace and then click Properties.

Click the Advanced tab and then uncheck the "Enable access-based enumeration" for this namespace check box.

Screenshot attached and you may also follow this link for more info - https://msdn.microsoft.com/en-us/library/dd759150.aspx
5a4d770e1a37e_Enumsetting.png.5661470f11c7fea2e6742ea272238736.png

 

Option 2 is to create a new group in AD, assign some of the Computers which have the problem to that group. Add that group to the drive shares, giving the group full access over the share. If this works, assign all Computers needed in AD to the group.   

Edited by djacobson
grammar
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.