Kaspersky
Question

11.2 Behavior Detection breaks Applications writing to shared drives

  • 29 November 2019
  • 13 replies
  • 1813 views

Just a warning we now have two applications in house that cant overwrite files on network shares/mapped drives with this option enabled.  Disabling “Protection of shared folders against external encryption” removes the problem as I worked with support on this case  INC000011020891.  Working on traces/log collection but I am very hesitant to disable this important feature. Anyone else?


13 replies

Userlevel 6
Badge +4

Can a solution not be posted on this thread to save us unnecessary time and effort?

It’s also fixed with KES11.3 or CF1 for KES11.2 
https://support.kaspersky.com/15356

regards
alex

Userlevel 7
Badge +10

@Juannybennett

You have to open a support ticket in the Kaspersky Company Account for receive a private patch. Is the only way to receive private patchs.

Or try with KES v11.3.

Regards

Can a solution not be posted on this thread to save us unnecessary time and effort?

Userlevel 2
Badge

Hi

you should request the private fix pf6008 using the mentioned Company Account Portal.

Userlevel 7
Badge +10

@adimondo 

Hi,

Please open a support ticket in the Company Account, send gsi and traces for review.

Regards

Similar problem here.  What did you all end up doing to address the issue?  Is there a new release somewhere with a fix?  I’d also be happy to test that the fix works as expected.

Userlevel 2
Badge

pf6008 solves our issues (see also other topic).

I concur. Since 11.2 and with Behaviour Detection protection for file shares enabled, we have 2 apps, that can create files, but cannot write data to them. Exception being files around 2 KB or smaller.

Userlevel 2
Badge

we have the same issues.

If you have a fix, I can test it (would test it).

INC000011059789

Further to this another option which i am using from support is to trust the path/application in the policy/general settings/exclusions/trusted apps.  This works for now and should be much better than disabling the protection above!

Userlevel 5
Badge +4

Hi,

INC000011020891 is under investigation now.

Please await for an answer within the incident.

Thank you for cooperation!

Same problem here!

Overwriting a file in a mapped drive is blocked without notice.

Writing is not a problem.

 

Today I noticed similar problem like yours.

Users of our accounting software they had problem to generate some reports in this sw. These reports are generated to mapped drives / shared folder.
I didn´t have enough time to solve it, the only thing, which helped was to dissable the kaspersky antivirus. So as an temporary workaround we decided to deploy the earlier version v10 of Kaspersky Endpoint Security :(

I see now, that we are not alone!
https://community.kaspersky.com/produkty-kaspersky-dlya-biznesa-31/kes-11-2-blokiruet-programmu-5805
 

Don´t upgrade to the new  version 11.2.0.2254 !!! :(

Reply / Ответить