Missing detection or false negative in ICSP and ICSP Neural

Products

• Industrial Control System Protection Neural

Issue/Introduction

You suspect a file to be malicious or infected but ICSP does not detect it.

Resolution

The procedures vary slightly between product versions so be  sure to check your version of ICSP first so you can chose either a) or b) procedures.

a) ICSP version 5.3.x:

Please create a support case and send the suspected file in a zip file with password protection.

Please always use the password "infected" without the quotes. This allows for safer and faster processing.

b) ICSP version 5.4.x and ICSP Neural version 6.x:

Go to hhttps://symsubmit.symantec.com

Fill out the form and submit the file. Note that you will need your Support ID (SID) to file the request. The system will notify you of the progress.