Solved

Strong AV Policy blocking images in Outlook

Posted on 2014-03-19
7
808 Views
Last Modified: 2014-04-05
Hi

The setup:
Windows 7(64) / Office 2010(64) both service packed and patched up to latest.  Mcafee Virusscan 8.8 patch 4. Managed by epo.  This is a new installation with little other software installed.

The problem:
Access protection appears to be blocking Outlook from displaying web images.  If I disable access protection, all is good again. Have run a full and deep system scan and found nothing malicious.

The Access Protection log file shows the following:

C:\Windows\system32\DllHost.exe triggering Anti-spyware Standard Protection:Protect Internet Explorer favorites and settings

and

C:\Windows\system32\taskhost.exe triggering Anti-virus Maximum Protection:Protect cached files from password and email address stealers

I dont think I want to exclude these processes from scanning.  Please help.
Thanks
0
Comment
Question by:space_time
  • 3
  • 3
7 Comments
 
LVL 13

Expert Comment

by:Norm Dickinson
ID: 39941951
McAfee offers a very robust and configurable system of protection and it can be a bit intimidating to install for this very reason. The generic "Standard" or "Maximum" protection levels are only starting points for most installations.

The full knowledge base is located at https://support.mcafee.com/ServicePortal/faces/knowledgecenter 

McAfee also offers a wide variety of advanced training and certification for free to its partners. Details can be found at http://www.mcafee.com/us/partners.aspx

Unfortunately this is not one of those topics that has an easy answer or a "low, medium or high" type of "level" of protection. One size does not fit all. Here it pays to learn the product fully and to implement the best custom fit for the client, or call support and have them walk you thru the steps based upon management buy-in and a decided set of rules.

Wait until you set up the firewall - it's even more powerful and has even more features that will need a similar approach in order to know you are protected. McAfee products are not a place to be guessing, after all.
0
 
LVL 54

Expert Comment

by:McKnife
ID: 39942088
I can only fully agree.
You need to be aware not only what setting that would be, but what consequences it would mean for overall security.

If you need to find that setting and no one here knows it, open a ticket with McAfee support.
0
 

Author Comment

by:space_time
ID: 39949845
Thanks for tip.  McAfee support was my next port of call.  To clarify, this is not a new mcafee setup, but a new workstation setup.  The av policies are historic and have not caused a problem like this in the past.  I am familiar with the configuration of the suite and epo, but I think this particular problem is to do with the way Outlook works in this particular version.  Will get ticket open Mcafee and see if I get a solution.  Will post what I get back here.  Cheers
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 13

Expert Comment

by:Norm Dickinson
ID: 39949894
Thanks for the update! Please post the resulting solution here if you don't mind so that others will be able to find it from searching the knowledge base.
0
 

Accepted Solution

by:
space_time earned 0 total points
ID: 39966747
Ok here is my update and its one of those 'smacks head against keyboard' answers.  There was nothing wrong with the epo or virusscan.  The same policy was applied to 2 machines and was only a problem on 1.  I figured the problem was access protection as when disabling it on the non-working machine the problem went away.

The difference between the machines was the Internet Explorer version.  The working machine was on IE9 and the non-working IE11.  At first I dropped IE down to 10 and still no luck but going further to 9 got it working.  Microsoft changed something fundamental in how Outlook uses IE between 9 and 10.  I don't know what but I'll have to stick with 9 for the moment.  Its annoying because the assumption is that IE 10/11 would be more secure than 9.  Apparently this is not the case.

Thanks to all who helped.
0
 
LVL 13

Expert Comment

by:Norm Dickinson
ID: 39966759
You would probably need to add a site or sites to the trusted site list. IE11 has some inherent trust issues and this will resolve the issue should you run into it again.
0
 

Author Closing Comment

by:space_time
ID: 39979847
Solved and understood this particular problem with this answer.  Would still like to know how to update to IE10/11 without making my computer insecure.
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Phishing is at the top of most security top 10 efforts you should be pursuing in 2016 and beyond. If you don't have phishing incorporated into your Security Awareness Program yet, now is the time. Phishers, and the scams they use, are only going to …
Transferring data across the virtual world became simpler but protecting it is becoming a real security challenge.  How to approach cyber security  in today's business world!
The viewer will learn how to use a discrete random variable to simulate the return on an investment over a period of years, create a Monte Carlo simulation using the discrete random variable, and create a graph to represent the possible returns over…
Learn how to create and modify your own paragraph styles in Microsoft Word. This can be helpful when wanting to make consistently referenced styles throughout a document or template.

816 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now