aside from Application Control, can i use Custom IPS to Block Specific MD5?
Custom IPS signature for hash file MD5
Malware-Saposhi
Dear Team,
Are we protected with this new malware,kinldy review and suggest.
SEP v14 Incompatible with Win10 v1803 Update
Just updated to latest version of Win10 and get the same problem as was previously happening upon previous Fall Creator's Update (1709). Is there a version of v14 that works with version 1803?
https://www.symantec.com/connect/forums/windows-10...
Deploying SEP 14.x on Server 2016 with sql server 2017
I am looking at deploying a new server with Server 2016 and sql server 2017 on. I just wanted to know firstly if there are any issues with SEP 14.x & SQL 2017 and secondly are there any files i would need to miss out when scanning that are different from previous versions of SQL.
Endpoint Protection Not Working - Yellow Exclamation Mark - Not Opening
Basically to summarise, all my users are on 14.0.2 and I deployed out 14.0.3 via SCCM which according to fellow users on here, will upgrade it automatically.
So 50% of the users, it works fine, but the other 50% are faced with this problem where it's not opening at all and it has a yellow exclamation mark on the icon on the taskbar.
What do you guys suggest I do?
Any help is appreciated.
Compatibility SEP-Diebold Software Solutions
Hello, we need to know if Symantec Endpoint Protection is compatible with Diebold Software Solutions (ATM SOFTWARE), does anyone have any experience with this?
ccSvcHst.exe High CPU during scans that cripples the system altogether
High CPU during scans - defwatch scans or scheduled - to the point that users had to reboot their computer.
Issue started happening last month and it's becoming progressively worse. I have a case with Symantec but they are still investigating the problem.
SEPM was running 14.0.3752.xxxx until last Friday when we were advised to upgrade to 14.0.3897.xxxx which we did. Clients are still on 14.0.3752.1000. Test machines have been upgraded to 14.0.3897.1000. Bottomline, the upgrade to the latest build did not fix the problem.
Anyone here experiencing the same issues and have you discovered a resolution?
Upgrading from 12.1 to 14 breaks password prompt on client
Hi guys,
We upgraded from 12.1 to 14 recently and now need to push the package out to our clients. We've tried using both SCCM and package install via SEPM, but during our tests, it seems 3/10 of the clients are not prompting for the password anymore when accessing endpoint. Our policy is updating and the policy numbers match up. Does anyone know the fix or where I should start looking on this one?
Yours,
CR
Log, but don't notify, on certain HIPS signatures
Hello everyone,
I'm a big fan of the SEP HIPS engine and I subscribe to the "Network and Host Exploit Mitigation and Compliance Events" notifications. But there are a couple of particular signatures that are getting rather noisy, and what I'd like to do is to stop getting notified for those signatures. I'd like those events to still be logged so I can run reports or browse the events, but I don't want to get emails for them (but I still want email notifications for other intrusion prevention signatures). Is there a way to accomplish this goal?
Thanks in advance!
Bulit-in Web Camera Blocked by SEP
Bulit-in Web Camera Blocked by SEP even though i got whitelisted it on blocking. I have added its device id on the list to get whitelisted. Can you help me on what to do on the unit. This is occuring only to 1 machine. Previous version is 12.1.6 upgraded it to version 14 still no good.
Windows 10 on Arm
Hi,
Will Symantec support SEP installed on Windows 10 on Arm, will there be a native client for Windows 10 on Arm provided in the future?
Thanks.
How to get existing SEP clients to update from GUP again
Good Day,
I was wondering if anyone could point me in the right direction or maybe assist, I've some issue with our server vm's rebooting continusly which has caused the GUP's on these to no longer update from theSEPM as well provide content for the SEP clients on each local lan, is there a way to fix this? at the moment all the SEP clients are getting content straight from the SEPM
Your assistnace would be much appericated
Kind Regards
Alistair Davies
Replication error
Hello All,
Good Morning,
I have two SEPM console and they are replicating each other till friday , all of suddenly the both SEPM consoles are not replicating eatch other.
Am getting below error.
Unable to fetch changed data from remote site [xyz]: I/O Error: Read timed out [Site: ABC] [Server: ABC]
I have performed the below steps:
1 .SEPm servies restarted and check still same issues
2 rebooted the bothe SEPM consoles.
3 rebooted the Database servers as well tryied same error : replication fail.
I would request you all help me resolve the issues.
SEP12 - Symantec Service Framework has stopped working
Hi all,
I'm trying to run SEP12 in Windows 7 Embedded Standard but all the time framework crashes for some reason.
See bellow the report:
Problem signature:
Problem Event Name: BEX
Application Name: ccSvcHst.exe
Application Version: 12.12.5.1
Application Timestamp: 5a53ed09
Fault Module Name: StackHash_0a9e
Fault Module Version: 0.0.0.0
Fault Module Timestamp: 00000000
Exception Offset: 00000000
Exception Code: c0000005
Exception Data: 00000008
OS Version: 6.1.7601.2.1.0.320.65
Locale ID: 1033
Additional Information 1: 0a9e
Additional Information 2: 0a9e372d3b4ad19135b953a78882e789
Additional Information 3: 0a9e
Additional Information 4: 0a9e372d3b4ad19135b953a78882e789
Read our privacy statement online:
http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409
If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt
Does anyone have any idea how to fix it?
Thank you.
SEPM Console - java scm-ui
Hello,
I was wondering if there is any major objection to run java applet scm-ui copied from SEPM server to different "normal" server.? Instead of running it through Hppt web console which eventually opens that applet :) ? I've copied and modified sesm.bat and clienpkg and jre folders from SEPM. Looks like everything is running fine console works and I was able to login to remote SEPM server.
sesm.bat
@start "SESM""C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\jre\bin\javaw.exe" -Dprism.order=sw -Xms1024m -Xmx2048m -XX:MinHeapFreeRatio=40 -XX:MaxHeapFreeRatio=70 -XX:NewRatio=15 -Dsun.locale.formatasdefault=true -jar "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\clientpkg\scm-ui.jar" %*
Greets
email alert send to postmaster
hello
i have install sepm server with 14 version
after i confiugre smtp connection i start to see email alert beside of sent to the admin group they are sent also to postmaster group
any idea why this heppend ?
shahar
unable to update the definition for network and host exploit mitigation
Hello!
I am unable to update the definition of "Network and host exploit mitigation" on my SEP14.
But another definition can be update.
I found this problem should be happen start since start from day 1 after i installation.
Any advise for me. Thanks
Regards
Sam
How to see omitted item list?
Hi!
I'm wondering how to know what items are omitted in my server by SEP, I've searched on the forum and other source and still can't find the answer.
This is how I see omitted item numbers:
Monitors > Logs > Log type = Scan > column omitted
I can see various numbers on each server but how to know what items were omitted?
Cannot deploy from SEPM on Replicated server
I am running replicated SEPM servers but I am unable to deploy from the server that is being replicated to.
The error I get is that there is no available client package to be deployed. You must first import at least one package.
The original server can still deploy the packages.
I assumed that with replication that it would replicate the installation packages, but I was clearly wrong :). What do I need to do for this to work please?
Thanks,
SEP 14.0.1 MP1 : GUI Client Tasks > add group feature not appearing
Hi
Upgraded SEP 14.0.1 RI mp1
Now when go to gui
Clients
Tasks
it is not showing add groups button
also add groups and Move is disappearing .
What i have to do