TDR classifying ScreenConnect as Threat

BrianSteingraber

Is anyone else seeing TDR classifying the Connectwise/LabTech ScreenConnect program being classified as a Threat with a score of 8 starting today?

Ricardo_Arroyo

Good morning @BrianSteingraber. Please submit this to support immediately. If this is indeed a false positive we want to make sure we remedy this quickly. Please include the MD5 and full path of the problem file. In the mean time you can add it as a whitelist item to your signature overrides. You can accomplish this using the Actions Dropdown in the Indicators page. Hope this helps! https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/services/tdr/tdr_indicators_c.html

BrianSteingraber

@Ricardo_Arroyo, I already whitelisted and submitted to our MSP/ConnectWise vendor. I'll also submit a support case shortly.

BrianSteingraber

Case submitted