Author Topic: Need to selectively disable SandBox in Avast EndPoint  (Read 2742 times)

0 Members and 1 Guest are viewing this topic.

Offline paul.adams

  • Newbie
  • *
  • Posts: 2
Need to selectively disable SandBox in Avast EndPoint
« on: October 20, 2016, 07:12:01 AM »
We have recently switched from a major competitor corporate anti-virus suite product to avast EndPoint Suite.

We are a software development company.  As such, we have many unknown or uncommon applications that we frequently use.  Accordingly, the automatic sandbox is frequently activating when we launch applications that are commonly used here.

How can I turn the sandbox off for a specific group of client PCs?

I have tried adding global exceptions for the executables.  However, the "excluded" applications are frequently sandboxed anyway.  Further, every day ten or more new applications are being reported to me by staff as having been "blocked".

Additionally, after having sandboxed and tested an application and then allowing it to be run, if it is almost immediately relaunched, it is again sandboxed.

Isn't there any heuristic applied to this?

    "I just checked this application;"
    "The user allowed it to run after I permitted it;"
    "The application's signature hasn't changed;"
    "Maybe I don't need to sandbox it again"

Offline Asyn

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 69387
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Win 8.1 [x64] - Avast PremSec 21.2.2451.Beta#2 [UI.599] - EEK - Firefox ESR 78.8 [NS/uBO/PB] - TB 78.8
Avast-Tools: Secure Browser 88.2 - Cleanup P 21.1 - SecureLine 5.9 - Driver Updater 21.1 - CCleaner 5.77
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Ominous

  • Newbie
  • *
  • Posts: 8
Re: Need to selectively disable SandBox in Avast EndPoint
« Reply #2 on: February 14, 2017, 07:28:58 PM »
Is there any link you can post for someone that is not a developer, I have the same issue even though I have specifically told avast the program/process is fine it still gets blocked and shows up in the weekly report as "bad" software.

Offline Asyn

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 69387
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Need to selectively disable SandBox in Avast EndPoint
« Reply #3 on: February 15, 2017, 06:07:29 AM »
Is there any link you can post for someone that is not a developer, I have the same issue even though I have specifically told avast the program/process is fine it still gets blocked and shows up in the weekly report as "bad" software.
You can report a suspected FP here: https://www.avast.com/false-positive-file-form.php
Win 8.1 [x64] - Avast PremSec 21.2.2451.Beta#2 [UI.599] - EEK - Firefox ESR 78.8 [NS/uBO/PB] - TB 78.8
Avast-Tools: Secure Browser 88.2 - Cleanup P 21.1 - SecureLine 5.9 - Driver Updater 21.1 - CCleaner 5.77
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0