RyanTait

About

Display Name
RyanTait
Joined
Visits
24
Last Active
Roles
WatchGuard Representative
Points
3
Badges
0

Comments

  • This is kind of a weird one. The AV exclusions are there to prevent TDR from interfering with the scanning function of the Antivirus engine. We don't want TDR scanning updates for AV or scanning the AV engines temp files as its doing its job, and we don't want the AV engine doing the same thing to TDR. Our APT provider had…
  • trust.cdc.gov is something different, It looks like it requires a client certificate. I get that same message here when I try to access the site with just a packet filter. Open a case with the support team and we can work with you to see what is happening Ryan Tait | Support Representative WatchGuard Technologies, Inc. |…
  • Good morning In Fireware 12.4 we introduced TLS 1.3 support. Some websites that advertise TLS1.3 are not being handled by the proxy properly. The problem is being tracked as FBX-16143/FBX-16203. When a fix is available to the public it will be listed in the release notes with one of these bug numbers. The PFS thing is a…
  • Good morning, In general, the TDR host sensor will use more CPU on active systems like servers. As a first step, identity the locations of high process and file activity and create exclusions for those directories. Examples would be, Database server directories, install and content directories for high use applications,…
  • The TDR host sensor creates hidden directories in several locations on the file system. Documents folder, Desktop, c:\ and a few other locations. These folders contain files for the host sensor to monitor for suspicious activity and are required for Host Ransomware Protection to work. The files can't be deleted. If you…
  • The TDR host sensor creates hidden directories in several locations on the file system. Documents folder, Desktop, c:\ and a few other locations. These folders contain files for the host sensor to monitor for suspicious activity and are required for Host Ransomware Protection to work. The files can't be deleted. If you…