Exclusions Required for Absolute Device and Dell Data Security Applications
Summary: Absolute Device and Data Security may not properly launch or persist when Advanced Threat Prevention solutions using Machine Learning powered by CylancePROTECT are in play.
Symptoms
- As of May 2022, Dell Endpoint Security Suite Enterprise has reached End of Maintenance. For more information, reference the Product Life Cycle (End of Support / End of Life) Policy for Dell Data Security. If you have any questions on alternative articles, either reach out to your sales team or contact endpointsecurity@dell.com.
- As of May 2022, Dell Threat Defense has reached End of Maintenance. For more information, reference the Product Life Cycle (End of Support / End of Life) Policy for Dell Data Security. If you have any questions on alternative articles, either reach out to your sales team or contact endpointsecurity@dell.com.
- Reference Endpoint Security for additional information about current products.
Affected Products:
- Dell Endpoint Security Suite Enterprise
- Dell Threat Defense
- Absolute Device and Data Security
Cause
During the installation of Absolute Device and Data Security, or after the install of either Dell Endpoint Security Suite Enterprise, Dell Threat Defense or Cylance PROTECT will alert and block the primary application for Absolute Device and Data Security:
Figure 1: (English Only) Absolute Device and Data Security alert and block notification
Within the Absolute Device and Data Security console, there are no updates or inventory that is seen from a device that also has Advanced Threat Prevention installed.
The management console for these solutions may show a new threat for rpcnet.exe or rpcnet.dll within the directory of C:\Windows\System32\. Absolute signs these if they are detected.
Resolution
To allow for Absolute to properly interoperate with Dell Endpoint Security Suite Enterprise, Dell Threat Defense, or CylancePROTECT, Dell suggested allowlisting the code-signing certificate that Absolute uses to sign their applications. This will prevent future changes from also being detected as potential threats.
For information about allowlisting by certificate within Dell Endpoint Security Suite Enterprise or Dell Threat Defense, reference How to Add a Signing Certificate in Dell Endpoint Security Suite Enterprise.
To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.