Change in behavior of Bluetooth blocking rules after upgrade to Windows 10 version 1809 and later
Last Modified: 2022-09-06 15:59:49 Etc/GMT
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Change in behavior of Bluetooth blocking rules after upgrade to Windows 10 version 1809 and later
Technical Articles ID:
KB93519
Last Modified: 2022-09-06 15:59:49 Etc/GMT Environment
Data Loss Prevention (DLP) Endpoint 11.x Microsoft Windows 10 version 1809 and later Problem
DLP protection rules that block file transfers also block other Bluetooth devices, such as headsets.
Cause
Microsoft has changed the RFComm network adapter device. The RFComm was changed from a network adaptor device to a Bluetooth device. In Windows 10 versions 1507–1803, it was necessary to block the Bluetooth network adaptors to block files from being copied over Bluetooth. In Windows 10 version 1809 and later, you must also block the RFComm device to block file transfers. See KB91976 - How to block file transfers via Bluetooth. Solution
DLP is working as intended. The DLP policy was set to block the RFComm adaptor and it is blocked. The unintended behavior is some Bluetooth devices that use the RFComm are also blocked. To submit a new product idea, go to the Enterprise Customer Product Ideas page.
Click Sign In and enter your ServicePortal User ID and password. If you do not yet have a ServicePortal or Community account, click Register to register for a new account on either website. For more information about product ideas, see KB60021 - How to submit a Product Idea. Workaround
An Application File Access Rule for Languages:This article is available in the following languages: |
|