Whitelisting FenixPyre on Firewalls and Anti-virus/EDR solutions

Domain whitelisting in Firewalls

Whitelisting a domain in a firewall for SSL traffic means configuring your firewall to allow secure web traffic (HTTPS) to and from a specific domain. This ensures that SSL traffic (typically encrypted traffic on port 443) between your network and that domain is permitted by the firewall, bypassing any restrictions or blocking rules.

Here's a breakdown:

• Whitelisting: Refers to allowing certain traffic through the firewall, as opposed to blocking it.
• Domain: A domain name (like example.com) is the website or service you want to permit.
• SSL Traffic: Refers to secure communication over the web, typically handled by HTTPS (Hypertext Transfer Protocol Secure), which uses SSL/TLS encryption to protect data.

In essence, you're telling the firewall to explicitly allow any HTTPS (SSL) connections between your network and the specified domain, ensuring that encrypted data flows smoothly without being blocked by firewall rules.

FenixPyre Domains to whitelist

Mandatory domains

• apis.anchormydata.com
• fenixshare.anchormydata.com
• share.anchormydata.com
• mtls.apis.anchormydata.com
• admin.anchormydata.com

Others domains

• oauth.anchormydata.com
• anchor-connector.anchormydata.com
• hooks.anchormydata.com
• box.anchormydata.com
• wopi.anchormydata.com
• egnyte.anchormydata.com
• office.datanchor.io
• onedrive.anchormydata.com
• onedrive.datanchor.io
• office.datanchor.io

Whitelisting FenixPyre processes

Whitelisting a process or executable in EDR, anti-virus, or XDR means configuring these security policies to allow a specific process or executable file to run without being blocked, quarantined, or flagged as malicious.

Here's a breakdown of the key terms:

• Whitelisting: Refers to marking a specific process or file as trusted so that the security tool doesn't interfere with its operation, even if it normally might.
• Process/Executable: A process is a running instance of a program, while an executable is a file that launches a program (like .exe files in Windows). These are what you're allowing the system to trust.
• EDR (Endpoint Detection and Response): A security solution focused on monitoring, detecting, and responding to threats on endpoints (computers, servers, etc.).
• Anti-virus: Software designed to detect and protect against malicious programs (malware, viruses).
• XDR (Extended Detection and Response): A more advanced solution that integrates multiple security components (such as endpoints, networks, cloud systems) to provide a more comprehensive view of threats.

Why Whitelist?

• False Positives: Sometimes, legitimate processes or programs may be flagged as threats by security tools. Whitelisting ensures these legitimate processes are not blocked.
• Custom Software: Organizations may use custom or uncommon software that anti-virus or EDR might not recognize. Whitelisting prevents unnecessary disruptions.

How it Works:

• When a process or executable is whitelisted, the security software allows it to run without restriction, bypassing scans, sandboxing, or blocking actions.
• You typically specify the file path, hash, or digital signature of the executable to ensure it's properly whitelisted.

In summary, whitelisting a process or executable in security tools like EDR, anti-virus, or XDR ensures that specific trusted software can run unimpeded, even if it might trigger the security tool’s alerts otherwise.

FenixPyre processes to whitelist

You can either whitelist all processes and dlls in the installation folder: C:\Program Files\FenixPyre Client or whitelist the following executables and dlls individually

• C:\Program Files\FenixPyre Client\AddIn\AddInLogHandler.dll
• C:\Program Files\FenixPyre Client\AddIn\CustomMessageBox.exe
• C:\Program Files\FenixPyre Client\AddIn\ExcelAddIn.dll
• C:\Program Files\FenixPyre Client\AddIn\Microsoft.Office.Tools.Common.v4.0.Utilities.dll
• C:\Program Files\FenixPyre Client\AddIn\Microsoft.Office.Tools.Outlook.v4.0.Utilities.dll
• C:\Program Files\FenixPyre Client\AddIn\Newtonsoft.Json.dll
• C:\Program Files\FenixPyre Client\AddIn\OutlookAddIn.dll
• C:\Program Files\FenixPyre Client\AddIn\PowerPointAddIn.dll
• C:\Program Files\FenixPyre Client\AddIn\RegistryConfiguration.dll
• C:\Program Files\FenixPyre Client\AddIn\Serilog.dll
• C:\Program Files\FenixPyre Client\AddIn\Serilog.Sinks.Console.dll
• C:\Program Files\FenixPyre Client\AddIn\Serilog.Sinks.File.dll
• C:\Program Files\FenixPyre Client\AddIn\ThirdPartySharing.dll
• C:\Program Files\FenixPyre Client\AddIn\WordAddIn.dll
• C:\Program Files\FenixPyre Client\Tools\TlsCertUtility.exe
• C:\Program Files\FenixPyre Client\AddInLogHandler.dll
• C:\Program Files\FenixPyre Client\AnchorUtility.dll
• C:\Program Files\FenixPyre Client\AnchorUtility_x86.dll
• C:\Program Files\FenixPyre Client\AnchorWpfLibrary.dll
• C:\Program Files\FenixPyre Client\AsyncAwaitBestPractices.dll
• C:\Program Files\FenixPyre Client\AsyncAwaitBestPractices.MVVM.dll
• C:\Program Files\FenixPyre Client\FESFPolicy.exe
• C:\Program Files\FenixPyre Client\FesfUtil2.dll
• C:\Program Files\FenixPyre Client\FesfUtility.dll
• C:\Program Files\FenixPyre Client\FesfUtility_x86.dll
• C:\Program Files\FenixPyre Client\FPBackup.exe
• C:\Program Files\FenixPyre Client\FPCBMonitor.exe
• C:\Program Files\FenixPyre Client\FPCmd.exe
• C:\Program Files\FenixPyre Client\FPContextMenu.dll
• C:\Program Files\FenixPyre Client\FPDaemon.exe
• C:\Program Files\FenixPyre Client\FPDaemonEvents.dll
• C:\Program Files\FenixPyre Client\FPDBLib.dll
• C:\Program Files\FenixPyre Client\FPExec.exe
• C:\Program Files\FenixPyre Client\FPHealthMonitoring.exe
• C:\Program Files\FenixPyre Client\FPIC.dll
• C:\Program Files\FenixPyre Client\FPIconOverlay.dll
• C:\Program Files\FenixPyre Client\FPKernelEvents.dll
• C:\Program Files\FenixPyre Client\FPMI.exe
• C:\Program Files\FenixPyre Client\FPPolicy.dll
• C:\Program Files\FenixPyre Client\FPScanner.exe
• C:\Program Files\FenixPyre Client\FPSetup.exe
• C:\Program Files\FenixPyre Client\FPSpyder.exe
• C:\Program Files\FenixPyre Client\FPTrayApp.exe
• C:\Program Files\FenixPyre Client\FPUserNotifyApp.exe
• C:\Program Files\FenixPyre Client\libcrypto-3-x64.dll
• C:\Program Files\FenixPyre Client\MaterialDesignColors.dll
• C:\Program Files\FenixPyre Client\MaterialDesignThemes.Wpf.dll
• C:\Program Files\FenixPyre Client\Microsoft.Web.WebView2.Core.dll
• C:\Program Files\FenixPyre Client\Microsoft.Web.WebView2.WinForms.dll
• C:\Program Files\FenixPyre Client\Microsoft.Web.WebView2.Wpf.dll
• C:\Program Files\FenixPyre Client\Newtonsoft.Json.dll
• C:\Program Files\FenixPyre Client\NLog.dll
• C:\Program Files\FenixPyre Client\System.Runtime.CompilerServices.Unsafe.dll
• C:\Program Files\FenixPyre Client\System.Threading.Tasks.Extensions.dll
• C:\Program Files\FenixPyre Client\ThirdPartySharing.dll
• C:\Program Files\FenixPyre Client\WebView2Loader.dll
• C:\Program Files\FenixPyre Client\WpfAnimatedGif.dll