Starší ovladače filtrů třetích stran mohou ovlivnit chování šifrování externího média, pokud je nainstalována aplikace Dell Encryption Enterprise
Shrnutí: Software, který používá ovladače filtru staršího typu, například DLP, které monitorují externí média, může způsobit chování, které vede k tomu, že data externích médií nejsou šifrována. ...
Příznaky
Dotčené produkty:
- Dell Encryption Enterprise
Dotčené operační systémy:
- Windows
Příčina
Když starší ovladač filtru provádí monitorování externích médií, může to způsobit, že se soubory budou jevit jako odstraněnénebo odstraněné do stínu. V důsledku toho nejsou soubory šifrovány podle pravidel založených na zásadách.
Protokoly EMS zobrazují zprávy podobné níže uvedeným:
21.03.31 13:20:37.617 [I] [Volume "E:\"] [SWEEP] Starting full volume sweep! ContinuedSweep = 'F' 21.03.31 13:20:37.625 [I] Raising Event: "DeviceSweepStart". 21.03.31 13:20:37.687 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\CmgCryptoLib.mac" 21.03.31 13:20:37.690 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\EMSHelp.chm" 21.03.31 13:20:37.691 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\EMSHelp_DE.chm" 21.03.31 13:20:37.692 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\EMSHelp_ES.chm" 21.03.31 13:20:37.692 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\EMSHelp_FR.chm" 21.03.31 13:20:37.693 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\EMSHelp_IT.chm" 21.03.31 13:20:37.694 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\EMSHelp_JA.chm" 21.03.31 13:20:37.694 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\EMSHelp_KO.chm" 21.03.31 13:20:37.695 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\EMSHelp_PT-BR.chm" 21.03.31 13:20:37.695 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\EMSHelp_PT.chm" 21.03.31 13:20:37.698 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\VolEncInfo.iff" 21.03.31 13:20:37.766 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\VolEncInfo.temp.iff" 21.03.31 13:20:37.767 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\VolumeInfo.xml" 21.03.31 13:20:37.770 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\Access Encrypted Files (Mac).dmg" 21.03.31 13:20:37.773 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\autorun.inf" 21.03.31 13:20:37.773 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\newtest.pptx" 21.03.31 13:20:38.173 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_EMS_Config_Data_Dir_\VolEncInfo.iff" 21.03.31 13:20:38.173 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_EMS_Config_Data_Dir_\VolumeInfo.xml" 21.03.31 13:20:38.176 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\CmgCryptoLib.mac" 21.03.31 13:20:38.179 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\EMSHelp.chm" 21.03.31 13:20:38.179 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\EMSHelp_DE.chm" 21.03.31 13:20:38.180 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\EMSHelp_ES.chm" 21.03.31 13:20:38.180 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\EMSHelp_FR.chm" 21.03.31 13:20:38.181 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\EMSHelp_IT.chm" 21.03.31 13:20:38.181 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\EMSHelp_JA.chm" 21.03.31 13:20:38.182 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\EMSHelp_KO.chm" 21.03.31 13:20:38.183 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\EMSHelp_PT-BR.chm" 21.03.31 13:20:38.183 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\EMSHelp_PT.chm" 21.03.31 13:20:38.186 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\VolEncInfo.iff" 21.03.31 13:20:38.188 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\VolEncInfo.temp.iff" 21.03.31 13:20:38.188 [W] [SWEEP] File deleted before we got a change to sweep it! "E:\_Encryption_Data_Do_Not_Delete_\VolumeInfo.xml" 21.03.31 13:20:38.189 [I] [Volume "E:\"] Encryption sweep finished: Result = 0x00000000
A WSScan externího média také zobrazuje, že na externí jednotce média neexistují žádné (0) šifrované soubory.
Výstup zvýšení oprávnění ovladače zobrazuje starší ovladač, který je uvedený nad našimi ovladači CMG Shield:

Obrázek 1: (Pouze v angličtině) Starší jednotka nad ovladačem CMS Shield
Řešení
Pro toto chování není k dispozici žádná náprava kromě zakázání monitorování externích médií v softwaru.
Chcete-li kontaktovat podporu, přečtěte si článek Telefonní čísla mezinárodní podpory Dell Data Security.
Přejděte na portál TechDirect a vygenerujte online žádost o technickou podporu.
Další informace a zdroje získáte na fóru komunity Dell Security.