Add an additional program for remote access to the App Patrol list

General99 · December 1

Hello.

I've encountered misuse of the meshagent.exe (MeshCentral) program on my network.
Employees install the program without notification.
The problem is that this program can be renamed and access different addresses on its server side.
How can I block this program from running on the Zywall ATP 700?
This program isn't listed in APP Patrol. I've chosen to block all programs in the Thin Client category, but this doesn't work on meshagent.
I tried blocking the meshagent.exe client program through IPS, but that didn't work either. The program uses 443 in its work, and despite SSL inspection being enabled, blocking through IPS doesn't work.

Can Zyxel add this program to the APP Patrol list?

Zyxel_Melen · 3:40AM

Hi @General99

To block the traffic, the current method is to set a security policy for the specific source IP, which is the MeshCentral server ip.

In addition, you can add the MD5 of the meshagent exe or zip file to the anti-Malware block list, which should restrict your employees to download these files.

Can Zyxel add this program to the APP Patrol list?

Let me create the idea post for you and share your requirement to the product team.

https://community.zyxel.com/en/discussion/31342/add-meshagent-meshcentral-to-the-app-patrol-list

Add an additional program for remote access to the App Patrol list

All Replies

Categories

Security Help Center