Advice Request Kaspersky 2017 - Trusted Application Mode

[shmu26]

@XhenEd, you use just appguard and HMPA now?

 

[XhenEd]

you use just appguard and HMPA now?

Nope. I use those two plus KIS 2017.

 

[AMD1]

HI,

I have trusted application mode enabled which i think is good however i am getting a few programs blocked still. I would rather be able to manage blocked applications with a prompt. I have low and high restricted set to prompt and untrusted set to deny. If I change the untrusted to prompt, would there be any other setting i would need to check so that any other setting is not over-riding ?

 

[harlan4096]

I guess You arealready Interactive Mode... do You have KSN rules active? and Trust in digitally signed applications enabled or disabled?

 

[AMD1]

I guess You arealready Interactive Mode... do You have KSN rules active? and Trust in digitally signed applications enabled or disabled?

KSN rules (peform recommended action) is unchecked but digitally signed applications are checked

 

[harlan4096]

I have just the opposite: KSN white listing rules enabled, and Trust in digitally signed applications disabled there are many malware that get legal digitally signing

 

[shmu26]

KSN rules (peform recommended action) is unchecked

It sounds like you might be confusing two different settings.

1 In the General tab, it is recommended to enable "Perform recommended actions automatically"

2 In Application Control Settings, it is recommended to enable "Load rules... Kaspersky Security Network"

Please enable both of these settings, and see if that helps.

Then, if you find any of your trusted programs that are in the "low restricted" category, just move them right back up to "Trusted," if necessary. (However, many apps will run just fine in the "low restricted" category, so you only have to do this if you run into a problem with something being blocked.)

 

[AMD1]

It sounds like you might be confusing two different settings.

1 In the General tab, it is recommended to enable "Perform recommended actions automatically"

2 In Application Control Settings, it is recommended to enable "Load rules... Kaspersky Security Network"

Please enable both of these settings, and see if that helps.

Then, if you find any of your trusted programs that are in the "low restricted" category, just move them right back up to "Trusted," if necessary. (However, many apps will run just fine in the "low restricted" category, so you only have to do this if you run into a problem with something being blocked.)

Thanks, i have changed to the above.

 

[larry goes to church]

From my experience with kes 10 you and whitelist anything you want.

Blacklist the rest.