Watch, Follow, &
Connect with Us

For forums, blogs and more please visit our
Developer Tools Community.


Welcome, Guest
Guest Settings
Help

Thread: XE7 Compiled Applications and Sonicwall


This question is not answered. Helpful answers available: 2. Correct answers available: 1.


Permlink Replies: 2 - Last Post: Dec 9, 2015 12:49 PM Last Post By: Jeff Cope
Jeff Cope

Posts: 88
Registered: 1/27/01
XE7 Compiled Applications and Sonicwall  
Click to report abuse...   Click to reply to this thread Reply
  Posted: Dec 9, 2015 11:34 AM
Recently we've found that our Sonicwall is detecting most XE7 compiled applications as Banload.VSB_2 (Trojan). Even if we just create a new VCL Forms application, save and compile, we cannot transmit the exe across the firewall without it blocking it. What's strange is we tried this same test with an XE2 compile and the files transmit fine. Even putting it into a zip file fails as sonicwall must look at the contents of a standard zip file. Now if we use the 7z format it transmits but my guess is it doesn't have the ability to read the contents of 7z.

We can transmit other executables not compiled with delphi and even some delphi applications but most of what we try to transmit fails.

Is there a compiler setting we can use to help eliminate these false positives?
Remy Lebeau (Te...


Posts: 9,447
Registered: 12/23/01
Re: XE7 Compiled Applications and Sonicwall  
Click to report abuse...   Click to reply to this thread Reply
  Posted: Dec 9, 2015 12:02 PM   in response to: Jeff Cope in response to: Jeff Cope
Jeff wrote:

Is there a compiler setting we can use to help eliminate these
false positives?

Not likely. If I had to guess, Sonicwall is probably detecting certain byte
patterns in the EXE that are inherant to the Delphi RTL and cannot be changed.
You should submit your troubling EXE files to the Sonicwall developers for
review.

--
Remy Lebeau (TeamB)
Jeff Cope

Posts: 88
Registered: 1/27/01
Re: XE7 Compiled Applications and Sonicwall  
Click to report abuse...   Click to reply to this thread Reply
  Posted: Dec 9, 2015 12:49 PM   in response to: Remy Lebeau (Te... in response to: Remy Lebeau (Te...
Remy Lebeau (TeamB) wrote:
Jeff wrote:

Is there a compiler setting we can use to help eliminate these
false positives?

Not likely. If I had to guess, Sonicwall is probably detecting certain byte
patterns in the EXE that are inherant to the Delphi RTL and cannot be changed.
You should submit your troubling EXE files to the Sonicwall developers for
review.

Thanks for the reply Remy.

Any idea what might have changed from XE2 to XE7? Our XE2 compiled applications can submit without a problem. That's kind of a work-around right now to use XE2 to compile some of these smaller apps we need to transfer.
Legend
Helpful Answer (5 pts)
Correct Answer (10 pts)

Server Response from: ETNAJIVE02