Forum Discussion

SYMAJ's avatar
SYMAJ
Level 6
9 years ago

EV File Blocking - file rename protection

I have a site running EV 11 SP1, and we have file blocking configured for NetApp filers (using a Windows proxy).

I have a question regarding protection against users (or viruses) renaming a file on the protected file system / share.  The current config stops users from saving specific file extensions on the protected file system / share, but i am wondering if we can protect against a virus which renames files by adding an extension (i.e xxx.doc to xxx.doc.ecc).

Any input appreciated.

AJ

  • interesting use case against cryptovirus. should be easy enough for you to test this out.

  • We can manually rename a file OK, it seems to be just creation which is halted by EV File Blocking - so I am guessing the answer to my question is no.......

    AJ

  • sorry, that it didn't work but glad you were able to test it yourself to confirm