This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Microsoft Outlook and Salesforce toolbar for Outlook causing 'Exploit Cryptoguard' detections

I am quite sure these are false positives.

When adding an image [.jpg or .png] to a case in the Salesforce Toolbar for Outlook it gives an alert for 'Exploit Cryptoguard'.

By going through the Root Cause analysis, the only programs effected are Outlook and the Salesforce toolbar. The only IP addresses are our mail server and the Salesforce.com IPs. and the only business files effected are the two jpg files the user is trying to attach. Does anyone have any idea how to stop this from happening?

Outlook is 2013 and 2007

This thread was automatically locked due to age.

Parents

0 Rich Billard over 7 years ago

FYI I got an email from Sophos support with a cut/paste website to go report a bug.

It seems as though they did not read the part of the ticket where it was stated this is a known bug.
Cancel
Vote Up 0 Vote Down

Cancel
0 Rich Billard over 7 years ago in reply to Rich Billard

this is still not resolved.

Salesforce for Outlook Toolbar is constantly releasing new versions along with multiple versions of Outlook to combine them with

I had a registry hack fix from your tech to fix one particular version of the toolbar along with Outlook 2016. Same version of toolbar in combination with Outlook 2007 lights up with Cryptoguard.

we need ALL versions of outlook combines with ALL versions [past/present/future] of Salesforce for Outlook toolbar to stop giving false positives. This is causing incredible loss in productivity.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Rich Billard over 7 years ago in reply to Rich Billard

this is still not resolved.

Salesforce for Outlook Toolbar is constantly releasing new versions along with multiple versions of Outlook to combine them with

I had a registry hack fix from your tech to fix one particular version of the toolbar along with Outlook 2016. Same version of toolbar in combination with Outlook 2007 lights up with Cryptoguard.

we need ALL versions of outlook combines with ALL versions [past/present/future] of Salesforce for Outlook toolbar to stop giving false positives. This is causing incredible loss in productivity.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Aditya Patel over 7 years ago in reply to Rich Billard

Hi Rich ,

Could you DM your contact details requested via Private message..

Regards,

Aditya Patel
Global Escalation Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ingo Wittig over 7 years ago in reply to Rich Billard

Same issue here. Rich do you have the registry hack for 2016? I'll keep these guys at one version of Salesforce, if it helps, until this is fixed. Aditya, do you have any updates?: Like Rich, I have multiple users who require this to work.
Cancel
Vote Up 0 Vote Down

Cancel
0 Rich Billard over 7 years ago in reply to Ingo Wittig

unfortunately the issue came back last night after it working fine.

Sophos needs to do some actual work to whitelist the SalesForce for Outlook toolbar instead of taking 3 weeks per case to create a bandaid registry hack to temporarily fix this.

You need a seperate patch for every different combination of outlook version AND salesforce version.

Aditya: When will this be fixed for good?

Supposedly there is the ability in the works for end users to whitelist programs [after they are detected falely by CryptoGuard of course....]

This has been a terrible experience and i do not recommend this product.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ingo Wittig over 7 years ago in reply to Aditya Patel

Hi Aditya,

Is this Cryptoguard false detection part of Endpoint or Intercept X? If by Intercept X, is it possible to disable Intercept X by policy or would I need to remove and reinstall just the Endpoint?

I appreciate your help.

Ingo
Cancel
Vote Up 0 Vote Down

Cancel
0 Rich Billard over 7 years ago in reply to Ingo Wittig

Ingo, I think Cryproguard is an extremely important component of Sophos and is entirely the reason we upgraded. Too bad there is zero end user configurability and it is ripe with false positives.....

We need this Salesforce for Outlook issue fixed immediately. it has been going on since early December.
Cancel
Vote Up 0 Vote Down

Cancel
0 Greg CT over 7 years ago in reply to Rich Billard

Just curious, does setting an Exploit Exclusion in Sophos Central not fix the issue for all users? I thought this was the way it was supposed to work?

https://community.sophos.com/kb/en-us/125054
Cancel
Vote Up 0 Vote Down

Cancel
0 Ingo Wittig over 7 years ago in reply to Greg CT

Thanks Greg, I missed that one. I'll test it out and see how that runs as a workaround. I'll copy the policy and apply it to my Salesforce users and see if that mitigates the issue.
Cancel
Vote Up 0 Vote Down

Cancel
0 Rich Billard over 7 years ago in reply to Ingo Wittig

I thought about that but did not want to whitelist "outlook.exe" or disable Cryptogaurd. i may have read those instructions wrong . please let me know how it works out
Cancel
Vote Up 0 Vote Down

Cancel
0 Rich Billard over 7 years ago in reply to Rich Billard

why has this issue not been resolved yet?
Cancel
Vote Up 0 Vote Down

Cancel