Post reply

SSRS - "Virus/Spyware Download Blocked"

  • March 27, 2018 at 2:24 am

    #410363

    Virus/Spyware Download Blocked

    Hi all,

    I installed new SSRS server 2016 latest SP & CU.
    When connecting to it cross domain, our FW Palo Alto blocks me since it recognizes its behavior as Threat (Security team claims it is authenticating many times in a second).

    Can anybody assist? should I change authenticating mode?
    Here is the error I get from Palo Alto FW:

    Virus/Spyware Download Blocked

    Download of the virus/spyware has been blocked in accordance with company policy. Please contact your system administrator if you believe this is in error.

  • March 30, 2018 at 3:25 pm

    #1985128

    ran.ovadia - Tuesday, March 27, 2018 2:24 AM

    Virus/Spyware Download Blocked

    Hi all,

    I installed new SSRS server 2016 latest SP & CU.
    When connecting to it cross domain, our FW Palo Alto blocks me since it recognizes its behavior as Threat (Security team claims it is authenticating many times in a second).

    Can anybody assist? should I change authenticating mode?
    Here is the error I get from Palo Alto FW:

    Virus/Spyware Download Blocked

    Download of the virus/spyware has been blocked in accordance with company policy. Please contact your system administrator if you believe this is in error.

    Did you check the windows event logs where SSRS is installed?  That should provide more information as it doesn't make sense or some information is missing from this scenario.

    Sue

  • March 31, 2018 at 8:42 am

    #1985141

    I'd have to say that the software on all fronts is doing precisely what it was designed to do.  I also don't believe there will be anything that you can do in SSRS to overcome this problem because the virus software was designed so that you couldn't overcome it there.

    You need to have the Security Team figure this out.  Otherwise, a couple of things could happen.
    1. You could download something harmful.
    2. Even if you don't, you could be terminated for going around established security protocols.

    This is NOT a failure on your part.  It WOULD be a failure on your part if you found and implemented a work around on your own.  Have the Security Team earn their keep.  This won't be the only time you'll need something like this and they absolutely MUST be involved at all times.

    --Jeff Moden

    RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
    First step towards the paradigm shift of writing Set Based code:
    ________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

    Change is inevitable... Change for the better is not.

    Helpful Links:
    How to post code problems
    How to Post Performance Problems
    Create a Tally Function (fnTally)

Viewing 3 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply