SM - Blocking Network Connection via Process Monitor

See what other community members have asked about the product or write here your own queries. The experts will help you out!
Post Reply
tcsdi_support1
Registered user
Registered user
Posts: 40
Joined: Tue, 26 Mar 2019, 04:24

SM - Blocking Network Connection via Process Monitor

Post by tcsdi_support1 » Wed, 07 Aug 2019, 05:37

Hi Support,

We tried to use a Monitoring policy to kill the process like Network Connection and we put ncpa.cpl on the process name.

But when we open Network Connection nothing happens SM did not kill the process and also no alert on the "Monitor" Tab

Kindly see the picture below:

Image


Best Regards,
TCSDI

Darth Panda
Official moderator
Official moderator
Posts: 1488
Joined: Tue, 24 Oct 2017, 12:04

Re: SM - Blocking Network Connection via Process Monitor

Post by Darth Panda » Wed, 07 Aug 2019, 09:07

Hi tcsdi_support1,

What happen if you execute ncpa.cpl?
Technical support – Panda Security
www.pandasecurity.com

tcsdi_support1
Registered user
Registered user
Posts: 40
Joined: Tue, 26 Mar 2019, 04:24

Re: SM - Blocking Network Connection via Process Monitor

Post by tcsdi_support1 » Wed, 07 Aug 2019, 09:25

Hi Darth,

When we open or execute the ncpa.cpl it will automatically kill the process or "end process" which is not happening and also no alert on the SM - "Monitor" tab

We also include Viber.exe on the Monitoring Process, when we open Viber SM will kill/end process the Viber and it appeared on the Monitor tab

Darth Panda
Official moderator
Official moderator
Posts: 1488
Joined: Tue, 24 Oct 2017, 12:04

Re: SM - Blocking Network Connection via Process Monitor

Post by Darth Panda » Thu, 08 Aug 2019, 12:26

Hi tcsdi_support1,

I'm sorry, but I don't understand. When you execute ncpa.cpl, is the process killed?
If you set the alert to send an email, do you receive it correctly?
Technical support – Panda Security
www.pandasecurity.com

tcsdi_support1
Registered user
Registered user
Posts: 40
Joined: Tue, 26 Mar 2019, 04:24

Re: SM - Blocking Network Connection via Process Monitor

Post by tcsdi_support1 » Fri, 09 Aug 2019, 03:51

Hi Darth,


1.) I'm sorry, but I don't understand. When you execute ncpa.cpl, is the process killed?
= The ncpa.cpl process are not killed

2.) If you set the alert to send an email, do you receive it correctly?
= I already set the alert to send an email but, No email received. Also on the console "Monitor"

Darth Panda
Official moderator
Official moderator
Posts: 1488
Joined: Tue, 24 Oct 2017, 12:04

Re: SM - Blocking Network Connection via Process Monitor

Post by Darth Panda » Fri, 09 Aug 2019, 11:26

Hi tcsdi_support1,


I have been testing and the problem is that when you run ncpa.cpl the process that loads is explorer.exe, so a process monitor will not close the Network Connections window.
Technical support – Panda Security
www.pandasecurity.com

tcsdi_support1
Registered user
Registered user
Posts: 40
Joined: Tue, 26 Mar 2019, 04:24

Re: SM - Blocking Network Connection via Process Monitor

Post by tcsdi_support1 » Wed, 14 Aug 2019, 11:24

Hi Darth,

Thank you for your response.

Is there any possible way on how to kill the ncpa.cpl "Network Connections" window?

Looking forward to your reply.

Best Regards,
TCSDI

Darth Panda
Official moderator
Official moderator
Posts: 1488
Joined: Tue, 24 Oct 2017, 12:04

Re: SM - Blocking Network Connection via Process Monitor

Post by Darth Panda » Wed, 14 Aug 2019, 12:30

Hi,

Not from our side, ncpa.cpl it's not a process, it's a command that the operation system use it to open "Network Connection" windows with the process explorer.exe.

Maybe you can avoid that behaviour with a window's GPO policy..

Regards,

Darth
Technical support – Panda Security
www.pandasecurity.com

Post Reply

Return to “SM - Issues”