SM - Blocking Network Connection via Process Monitor

See what other community members have asked about the product or write here your own queries. The experts will help you out!
Post Reply
tcsdi_support1
Registered user
Registered user
Posts: 57
Joined: Tue, 26 Mar 2019, 04:24

SM - Blocking Network Connection via Process Monitor

Post by tcsdi_support1 »

Hi Support,

We tried to use a Monitoring policy to kill the process like Network Connection and we put ncpa.cpl on the process name.

But when we open Network Connection nothing happens SM did not kill the process and also no alert on the "Monitor" Tab

Kindly see the picture below:

Image


Best Regards,
TCSDI
Darth Panda
Official moderator
Official moderator
Posts: 1568
Joined: Tue, 24 Oct 2017, 12:04

Re: SM - Blocking Network Connection via Process Monitor

Post by Darth Panda »

Hi tcsdi_support1,

What happen if you execute ncpa.cpl?
Technical support – Panda Security
www.pandasecurity.com
tcsdi_support1
Registered user
Registered user
Posts: 57
Joined: Tue, 26 Mar 2019, 04:24

Re: SM - Blocking Network Connection via Process Monitor

Post by tcsdi_support1 »

Hi Darth,

When we open or execute the ncpa.cpl it will automatically kill the process or "end process" which is not happening and also no alert on the SM - "Monitor" tab

We also include Viber.exe on the Monitoring Process, when we open Viber SM will kill/end process the Viber and it appeared on the Monitor tab
Darth Panda
Official moderator
Official moderator
Posts: 1568
Joined: Tue, 24 Oct 2017, 12:04

Re: SM - Blocking Network Connection via Process Monitor

Post by Darth Panda »

Hi tcsdi_support1,

I'm sorry, but I don't understand. When you execute ncpa.cpl, is the process killed?
If you set the alert to send an email, do you receive it correctly?
Technical support – Panda Security
www.pandasecurity.com
tcsdi_support1
Registered user
Registered user
Posts: 57
Joined: Tue, 26 Mar 2019, 04:24

Re: SM - Blocking Network Connection via Process Monitor

Post by tcsdi_support1 »

Hi Darth,


1.) I'm sorry, but I don't understand. When you execute ncpa.cpl, is the process killed?
= The ncpa.cpl process are not killed

2.) If you set the alert to send an email, do you receive it correctly?
= I already set the alert to send an email but, No email received. Also on the console "Monitor"
Darth Panda
Official moderator
Official moderator
Posts: 1568
Joined: Tue, 24 Oct 2017, 12:04

Re: SM - Blocking Network Connection via Process Monitor

Post by Darth Panda »

Hi tcsdi_support1,


I have been testing and the problem is that when you run ncpa.cpl the process that loads is explorer.exe, so a process monitor will not close the Network Connections window.
Technical support – Panda Security
www.pandasecurity.com
tcsdi_support1
Registered user
Registered user
Posts: 57
Joined: Tue, 26 Mar 2019, 04:24

Re: SM - Blocking Network Connection via Process Monitor

Post by tcsdi_support1 »

Hi Darth,

Thank you for your response.

Is there any possible way on how to kill the ncpa.cpl "Network Connections" window?

Looking forward to your reply.

Best Regards,
TCSDI
Darth Panda
Official moderator
Official moderator
Posts: 1568
Joined: Tue, 24 Oct 2017, 12:04

Re: SM - Blocking Network Connection via Process Monitor

Post by Darth Panda »

Hi,

Not from our side, ncpa.cpl it's not a process, it's a command that the operation system use it to open "Network Connection" windows with the process explorer.exe.

Maybe you can avoid that behaviour with a window's GPO policy..

Regards,

Darth
Technical support – Panda Security
www.pandasecurity.com
Post Reply

Return to “SM - Issues”