cancel
Showing results for 
Search instead for 
Did you mean: 

EV File Blocking - file rename protection

SYMAJ
Level 6
Partner Accredited

I have a site running EV 11 SP1, and we have file blocking configured for NetApp filers (using a Windows proxy).

I have a question regarding protection against users (or viruses) renaming a file on the protected file system / share.  The current config stops users from saving specific file extensions on the protected file system / share, but i am wondering if we can protect against a virus which renames files by adding an extension (i.e xxx.doc to xxx.doc.ecc).

Any input appreciated.

AJ

3 REPLIES 3

AndrewB
Moderator
Moderator
Partner    VIP    Accredited

interesting use case against cryptovirus. should be easy enough for you to test this out.

SYMAJ
Level 6
Partner Accredited

We can manually rename a file OK, it seems to be just creation which is halted by EV File Blocking - so I am guessing the answer to my question is no.......

AJ

AndrewB
Moderator
Moderator
Partner    VIP    Accredited

sorry, that it didn't work but glad you were able to test it yourself to confirm