FortiClient EMS 1.0.2 Blocking Teamviewer, Veem, Outlook as exploit

Forum|Forum|9 years ago
October 6, 2016
10 replies
14161 views

Hello everyone,

i have installed for a rist time the EMS and we are now Testing 20 Workstations with a customer. i must say EMS seems to be very cool improvment in comparison to managing FortiClient from FortiGate.

But we have one Big Issue now.

We activated Application Control and Also Exploit Protection. and now a lot of "good" and well known Applications like Veem, Outlook, TeamViewer, Apple Mobile Device Service etc. will be blocked as Exploit or P2P (Veem Backup for example)

So the question is how can we override this Applications if they will be threated as Exploit???

Thank you very much.

ems.jpg

Best answer by Carl_Wallmark

From what I seen is that once you install the FortiClient it will popup alot of "blocked" messages.

and this is while it´s updating the signatures, once it´s done it works as expected.

SteveG

New Member

We're using EMS 1.0.2 in a production environment. TeamViewer is working fine on a test laptop I have access to. You sure there's not spyware on that machine?

Incidentally I'm also exporting the FortiClient logs to FortiAnalyzer, which is very helpful.

HolyAuthor

New Member

Hello,

yes i am sure and i tested it yeasterday in my lab environment and expirienced the same problems...

SteveG

New Member

If it helps here are the version numbers I have installed.

Anti-Rootkit Engine2.00062AntiVirus Engine5.00233AntiVirus Signature39.00867AntiVirus Extended Signature39.00854AntiVirus Extreme Signature39.00854AntiVirus Heuristics Signature39.00867IPS Engine3.00154IPS Signature8.00971VCM Engine2.00015VCM Signature1.00116