Hi Support,
We tried to use a Monitoring policy to kill the process like Network Connection and we put ncpa.cpl on the process name.
But when we open Network Connection nothing happens SM did not kill the process and also no alert on the "Monitor" Tab
Kindly see the picture below:
Best Regards,
TCSDI
SM - Blocking Network Connection via Process Monitor
-
- Registered user
- Posts: 57
- Joined: Tue, 26 Mar 2019, 04:24
-
- Official moderator
- Posts: 1568
- Joined: Tue, 24 Oct 2017, 12:04
Re: SM - Blocking Network Connection via Process Monitor
Hi tcsdi_support1,
What happen if you execute ncpa.cpl?
What happen if you execute ncpa.cpl?
Technical support – Panda Security
www.pandasecurity.com
www.pandasecurity.com
-
- Registered user
- Posts: 57
- Joined: Tue, 26 Mar 2019, 04:24
Re: SM - Blocking Network Connection via Process Monitor
Hi Darth,
When we open or execute the ncpa.cpl it will automatically kill the process or "end process" which is not happening and also no alert on the SM - "Monitor" tab
We also include Viber.exe on the Monitoring Process, when we open Viber SM will kill/end process the Viber and it appeared on the Monitor tab
When we open or execute the ncpa.cpl it will automatically kill the process or "end process" which is not happening and also no alert on the SM - "Monitor" tab
We also include Viber.exe on the Monitoring Process, when we open Viber SM will kill/end process the Viber and it appeared on the Monitor tab
-
- Official moderator
- Posts: 1568
- Joined: Tue, 24 Oct 2017, 12:04
Re: SM - Blocking Network Connection via Process Monitor
Hi tcsdi_support1,
I'm sorry, but I don't understand. When you execute ncpa.cpl, is the process killed?
If you set the alert to send an email, do you receive it correctly?
I'm sorry, but I don't understand. When you execute ncpa.cpl, is the process killed?
If you set the alert to send an email, do you receive it correctly?
Technical support – Panda Security
www.pandasecurity.com
www.pandasecurity.com
-
- Registered user
- Posts: 57
- Joined: Tue, 26 Mar 2019, 04:24
Re: SM - Blocking Network Connection via Process Monitor
Hi Darth,
1.) I'm sorry, but I don't understand. When you execute ncpa.cpl, is the process killed?
= The ncpa.cpl process are not killed
2.) If you set the alert to send an email, do you receive it correctly?
= I already set the alert to send an email but, No email received. Also on the console "Monitor"
1.) I'm sorry, but I don't understand. When you execute ncpa.cpl, is the process killed?
= The ncpa.cpl process are not killed
2.) If you set the alert to send an email, do you receive it correctly?
= I already set the alert to send an email but, No email received. Also on the console "Monitor"
-
- Official moderator
- Posts: 1568
- Joined: Tue, 24 Oct 2017, 12:04
Re: SM - Blocking Network Connection via Process Monitor
Hi tcsdi_support1,
I have been testing and the problem is that when you run ncpa.cpl the process that loads is explorer.exe, so a process monitor will not close the Network Connections window.
I have been testing and the problem is that when you run ncpa.cpl the process that loads is explorer.exe, so a process monitor will not close the Network Connections window.
Technical support – Panda Security
www.pandasecurity.com
www.pandasecurity.com
-
- Registered user
- Posts: 57
- Joined: Tue, 26 Mar 2019, 04:24
Re: SM - Blocking Network Connection via Process Monitor
Hi Darth,
Thank you for your response.
Is there any possible way on how to kill the ncpa.cpl "Network Connections" window?
Looking forward to your reply.
Best Regards,
TCSDI
Thank you for your response.
Is there any possible way on how to kill the ncpa.cpl "Network Connections" window?
Looking forward to your reply.
Best Regards,
TCSDI
-
- Official moderator
- Posts: 1568
- Joined: Tue, 24 Oct 2017, 12:04
Re: SM - Blocking Network Connection via Process Monitor
Hi,
Not from our side, ncpa.cpl it's not a process, it's a command that the operation system use it to open "Network Connection" windows with the process explorer.exe.
Maybe you can avoid that behaviour with a window's GPO policy..
Regards,
Darth
Not from our side, ncpa.cpl it's not a process, it's a command that the operation system use it to open "Network Connection" windows with the process explorer.exe.
Maybe you can avoid that behaviour with a window's GPO policy..
Regards,
Darth
Technical support – Panda Security
www.pandasecurity.com
www.pandasecurity.com