Data Center Security (DCS) Intrusion Prevention Policy blocks network access for the bash process on Linux

Products

• Data Center Security Server Advanced

Issue/Introduction

The customer created inbound and outbound network rules to allow all the network communication in the Global Network Controls section and applied the policy and observed a Warning Network Access Denied event for a bash process 

Environment

DCS 6.10.x

RHEL 

Cause

In the DCS Unix Protection policy there is an additional global policy option "List of programs that should be blocked from doing networking" for bash and sh processes.

Resolution

If you do not need to use DCS client firewall feature disable the List of programs that should be blocked from doing networking in the Global Policy Option general settings.