Cylance portal

Thanks for your feedback.November 02, 2022 | 2524 view(s) | 4 people thought this was helpfulWebex DLL(s) Get Blocked on Cylance AntivirusFeedback?How to allow Webex on Cylance antivirus?Webex DLLs blocked after WBS 40.2 upgrade.As the Webex Meetings version 40.2 update continues to roll out, we have been notified that users using Cylance Antivirus for their desktop protection have experienced crashes or issues while joining or starting Webex Meetings.We have quickly worked with BlackBerry Cylance and the issue has been identified as the Cylance Antivirus product incorrectly blocking a Webex Meetings binary.As of March 2, 2020, 1:00pm PST, Cylance has reported to Cisco that this issue has been fixed by adding Webex Meetings software in Cylance product’s allowed list. Cylance has also pushed the new allowed list to their cloud, which should update the Cylance antivirus software on users’ desktops and resolve this issue.Option for administrators calling on behalf of their users:If multiple users continue to experience issues, Cisco and Cylance recommend that you contact Cylance customer support.Workaround for individual usersTo urgently join a meeting, a user facing an issue may follow steps given below to manually add Webex Meetings software to the safelist:Follow the steps below to allow Webex:Visit and log in to My Dashboard.Select the device name with a quarantined threat:Select the quarantined threat:Review the threat details, and add it to the safe list:Input the reason and select Confirm:You will then see it in Settings > Global Lists > Safe List:Was this article helpful?Was this article helpful?

I often find it difficult to get started with new projects ideas. For this blog, I wanted to demonstrate how to connect Cylance API using .NET because it is one of the most widely used frameworks in the world. The CylancePROTECT console has exposed REST APIs that allow you to automate and gather data from your Cylance tenant. The CylancePROTECT API allows developers to make REST requests to view and change their Cylance workspace: Users, Threats, InstaQueries, etc. This can be useful for automating enterprise IT. For example, enrolling new devices with a quick script instead of navigating all the Cylance dashboards. For detailed documentation on BlackBerry Cylance REST API, please see the Cylance API Guide.The CylancePROTECT console streams SYSLOG events from all its connected endpoints in real-time. This stream can be extended and pointed at your custom solution. The data is a log of Cylance events and can be used to conduct detailed analysis and trace security threats.For detailed documentation on Cylance SYSLOG, please see the Cylance SYSLOG Guide.Features of the sampleThe sample application consists of the output on the left and interactive buttons on the right. The small button at the top is to navigate the different panels. The large buttons may lead to prompts for additional data inputs to complete the API request. Once the request is complete, the response JSON is displayed in the lower text box. Viewing the raw request data will be helpful for debugging and understanding the API request you make.REST APIsCreate, Read, Update, Delete (CRUD) UsersRequest and Display ThreatsRequest and Display InstaQueries SYSLOGHost and Port configurationEnable/Disable incoming Syslog Stream How does it work?The Class Design Diagram illustrates how to use the sample: Windows Presentation Foundation (WPF) is the user interface framework of the sample. It is well integrated with .NET and easy to design within Visual Studio. The class Cylance is the gateway to all the REST API requests. The class SyslogSever manages the syslog TCP stream in a separate thread, allowing your user interface to continue unblocked. I ran into several issues around thread blocking, my suffering of thread blocking is now your blessing of a solution. Pressing Enable will spawn a thread running a TCP client that will accept incoming SYLOGs from the Cylance PROTECT Console.The sample lays the basis for you to expand upon and build projects. The application is available open-sourced under the Apache 2.0 License.To configure and run this application, check out the readme.md found with the source code here in BlackBerry’s GitHub. Thanks for reading! About Alvin Chan Solution Architecture Development Student

#1 I have a Sophos Home UTM that I build so I don't mind installing a UTM solution.I was wondering if there is a version of home use Cylance protection? #2 No, not yet.They are working on it./W #3 I have a Sophos Home UTM that I build so I don't mind installing a UTM solution.I was wondering if there is a version of home use Cylance protection? Hi Tempnexus,We don't yet offer a direct for consumer solution. That being said, we do have a number of current enterprise customers that provide a home use option for employee owned systems. If you're interested at all, please let me know and I can get you in touch with the right folks internally here at Cylance who would be happy to set up a demo for you and help out.Regards,Bryan @ Cylance #4 Hi Tempnexus,We don't yet offer a direct for consumer solution. That being said, we do have a number of current enterprise customers that provide a home use option for employee owned systems. If you're interested at all, please let me know and I can get you in touch with the right folks internally here at Cylance who would be happy to set up a demo for you and help out.Regards,Bryan @ Cylance Hi Bryan,Welcome to MalwareTips!It is always great to have an employee from the developer present.Maybe you could start a thread and let us follow the development of your product?Some of us here are eager to test drive

Article Number 000132273 Show Solution In Public Knowledge Summary Publication Status Published Intended Audience Internal, Partner, Customer, and Public Line of Business CSO Support Topic Product Info Environment Cylance Smart Antivirus (Smart AV) Issue Tracking Targeted User Platform Release Overview Offline mode indicates that the Cylance Smart Antivirus agent installed on your system is not able to contact your dashboard.The agent must be able to reach the dashboard to report status updates and receive policy updates. If internet access is not available, your system may display the agent as being in offline mode. The agent continues to function as configured and protects your device. However, it is recommended that you establish an internet connection so that your agent synchronizes with your dashboard.The following image displays the different icons that display for each Cylance Smart Antivirus status mode:If your agent still displays as offline when your system is connected to internet, submit a request here. Cause Resolution Workaround Additional Information Title Cylance Smart Antivirus offline mode URL Name 67386 Publish on Date Lock Editing to Seniors Created By Alexandra Magon Article Created Date 8/5/2020, 2:03 PM First Published Date 8/5/2020, 2:04 PM Last Modified By Jenkins Last Modified Date 4/8/2024, 12:53 PM Legacy Article Number Legacy Created By Legacy Created Date Legacy URL Name

Configuring a proxy for the CylancePROTECT Desktop and CylanceOPTICS agents If you want to configure both the CylancePROTECT Desktop agent and the CylanceOPTICS agent on a device to use a proxy server for outbound communication to BlackBerry servers, in the Registry Editor, navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Cylance\Desktop and create String Value REG_SZ: Value Name = ProxyServerValue Data = (for example, proxy must accept unauthorized requests. SSL inspection is not supported and must be bypassed for all agent traffic (*.cylance.com).For Windows environments, if you configured system wide proxy settings in HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings, you must specify the ProxyServer registry key value using , or the value must start with http:// instead of https:// (HTTPS proxy connections are supported but the registry value must not start with options for the CylanceOPTICS agent The CylanceOPTICS agent is proxy aware and will query the .NET framework to identify and use the available proxy settings. If you configured the ProxyServer value in the registry, the CylanceOPTICS agent will use the specified proxy. The CylanceOPTICS agent will try to communicate first as the Local System, then as the currently logged in user.If you configure the CylanceOPTICS agent to use a proxy and the agent cannot communicate with the cloud services, the agent will attempt to bypass the proxy to make a direct connection. On Windows and macOS devices, you can disable this proxy bypass. Do the following before you install the CylanceOPTICS agent: PlatformSteps WindowsIn HKLM\SOFTWARE\Cylance\Optics\, create String Value REG_SZ: Value Name = DisableProxyBypassValue Data = TruemacOSIn /Library/Application Support/Cylance/Desktop/registry/LocalMachine/Software/Cylance/Desktop/, add the following to the values.xml file: /Library/Application Support/Cylance/Optics/Configuration, create an ExternalConfig.xml file with the following: true When CylanceOPTICS creates a detection event that involves a signed file as an artifact, it uses a command from the Windows API to validate the signature or certificate. The command sends a validation