There are four potential solutions for this issue:
Solution 1 If the block is not impacting the functionality of the associated program (or the productivity of the user), choose to ignore the error
Solution 2If the error is producing too much noise in the event log, create a view that doesn’t show these errors with the followings steps:
- Navigate to Console > Events
- Enable the following columns (if they haven’t been already) “Description”, and “Rule Name”
- Click on Show/Hide Filter
- Select “Rule Name” and “Is Not”
- Insert text: “Block loading of DEP incompatible images into Carbon Black (Bit9 for pre-8.0 versions) processes”
- Then go to the top, and type in a name for it (ex. Regular View - No DEP)
- Click “Add”
- This view will now show up in the saved views
Also, create a second view that shows the DEP blocks to see them separately
- Navigate to Console > Events
- Enable the following columns (if they haven’t been already) “Description”, and “Rule Name”
- Click on Show/Hide Filter
- Select “Rule Name” and “Is”
- Insert text: “Block loading of DEP incompatible images into Carbon Black (Bit9 for pre-8.0 versions) processes”
- Then go to the top, and type in a name for it (ex. DEP Block View)
- Click “Add”
- This view will now show up in the saved views
Solution 3If it's affecting the application due to the block, contact the software vendor to get an understanding on why their file needs to touch the Carbon Black (
Bit9 for pre-8.0 versions) files and if it's possible to have them excluded
Solution 4The last option is to create a rule to circumvent the DEP Block
*Please keep in mind that the rule below bypasses a certain tamper protect rule and the file being blocked may affect the App Control (Bit9 for pre-8.0 versions) files if such a file is making changes to the App Control (Bit9 for pre-8.0 versions) files
- Navigate to Console > Rules > Software Rules > Custom.
- Click on “Add Custom Rule”
Name: Ignore DEP for Program X
Description: Optional but encouraged
Status: Enabled
Platform: Windows
Rule Type: Execution Control
Execute Action: Allow
Path or File: Can be found in the “File Path” column for the DEP event
Process: Can be found in the “Process” column for the DEP event
User or Group: Up to you
Rule Applies to: Up to you
- Click on Save.