Quantcast
Channel: Symantec Connect - Endpoint Protection - Discussions
Viewing all 10484 articles
Browse latest View live

SEP15 or SEP Cloud

$
0
0
I need a solution

I have been trying to create a SEP15 /Cloud tenant, however I am lost with the terminology that Symatec are usng for these products now.

I've discussed this with our previous technical account rep (before the Broadcom takeover and seemigly everyone at Symatec has resigned or been sacked) and he advised that Sep15 (cloud based) was a different product to Symantec Cloud with SEPC being a SMB based solution. 

I've created an Endpoint tenant here:  https://sep.securitycloud.symantec.com/v1/#/landing  and this dash refers to itself as "endpoint Security" yet it also mentions clients for 'Endpoint Protection" as well As "Endpoint Security".  All of the clients I have deployed so far are reporting to the dash as "Symantec Endpoint Security" clients.

The Sep Cloud home page also seems to redirect to the same landing page.   The page at: https://sepc.securitycloud.symantec.com/app/#/landing  seems to redirect to the same dash as above once you log on

I am finding that some of the features seem lacking compared to what I am used to with on-prem SEP14, particulary around reporting, so I want to make sure I am in the right product before I get too much further.  If I am deploying SEP15, should this be 'Endpoint Protection", "Endpoint Security"  or SEPc?

I've asked Symantec support and they don't seem to know the difference either

thanks

0

SEP Queries

$
0
0
I need a solution

ello Everyone, I would like to clarify couple of things from the experts here. 

1) If I have SEP 14.2 which I enroll into SEP 15, what benifets would I get ?

2) For this Hybrid setup are we going to miss out some key configuration settings which I can utilize if I run standalone on prem SEP?

3) How does this hybrid setup of SEP treats roaming clients ?

4) Can we still use Location Awareness and Host Integrity policies with this Hybrid setup?

5) What is better to use in terms of configuration flexibility, policies granularity and Administration ? The on prem SEP 14.2 or cloud delivered SEP 15?

Appreciare your feedbacks. Thanks

0

Report Showing Install Location of Client?

$
0
0
I do not need a solution (just sharing information)

Is there a report that will show the install path where SEP has been installed on a host? I'm not finding anything. We have hundreds of servers where previous SEP and server admins have installed the SEP client  some on C: and some on D: drives. I want to standardize the installation on servers to make upgrades more efficient. Thanks.

0

SEP Queries

$
0
0
I need a solution

ello Everyone, I would like to clarify couple of things from the experts here. 

1) If I have SEP 14.2 which I enroll into SEP 15, what benifets would I get ?

2) For this Hybrid setup are we going to miss out some key configuration settings which I can utilize if I run standalone on prem SEP?

3) How does this hybrid setup of SEP treats roaming clients ?

4) Can we still use Location Awareness and Host Integrity policies with this Hybrid setup?

5) What is better to use in terms of configuration flexibility, policies granularity and Administration ? The on prem SEP 14.2 or cloud delivered SEP 15?

Appreciare your feedbacks. Thanks

0

Disable Generic Exploit Mitigation

Configuring folder exceptions for SEP Linux Client

$
0
0
I need a solution

Hi all,

How do I configure folder exceptions for a linux OS? Anyone that has done this before?

Does the Exception policy work and if so how would I add the folders as an example. Would just adding the exact
path shown below work?

/usr/sap/hostctrl

/usr/sap/DAA

/usr/sap/hostctrl

Thanks

T

0

Failed deinstall of SEP

$
0
0
I need a solution

Hello,

first of all, excuse me for my bad English :)

I've got a problem with deinstalling SEP. I used it on my Windows 7 PC. Then I upgraded Windows 7 to Windows 10 while keeping all datas and programms which worked fine. I tried to deinstall SEP then to use Windows Defender.

Here is my problem: Windows Defender cannot be activated. When opening the "Security at a glance", I see "Symantec Endpoint Production is inactive". When trying to activate or open it, nothing happens (obviously because I deinstalled earlier). But it seems like Windows Defender isn't active either, because Windows stills thinks that I use SEP. And I don't find an option for activating Windows Defender.

Can you help me deinstalling SEP or at least activating Windows Defender?

Thanks in advance :)

0

Create Exception Policy via REST API

$
0
0
I need a solution

Hi everybody,

i want to create exception policies via REST API and powershell with the following code:

$Header =@{Authorization='Bearer '+$SEPMAuthenticationToken}

$Body = @{
	name = "TestExceptionREST"
	desc = "TestExceptionREST"
}

$BodyJSON = $Body | ConvertTo-Json

Invoke-RestMethod -SkipCertificateCheck -Method Post -Uri "https://${SEPMIPAddress}:8446/sepm/api/v1/policies/exceptions" -Header $Header -Body $BodyJSON

As I understand the REST API Documentation (chapter 4.87) all body parameters are optional so i should be able to create an exception with just a name and description. However execution of the Invoke-RestMethod commandlet always results in the following error:

Invoke-RestMethod : {"errorCode":"500","appErrorCode":"","errorMessage":"Internal Server Error"}

Can you give a working example for the creation of an exception policy via REST API?

Thanks in advance

P.S. there are many inconsistencies in the REST API that make life harder than it has to be imho

0

Disable Generic Exploit Mitigation

Configuring folder exceptions for SEP Linux Client

$
0
0
I need a solution

Hi all,

How do I configure folder exceptions for a linux OS? Anyone that has done this before?

Does the Exception policy work and if so how would I add the folders as an example. Would just adding the exact
path shown below work?

/usr/sap/hostctrl

/usr/sap/DAA

/usr/sap/hostctrl

Thanks

T

0

Create Exception Policy via REST API

$
0
0
I need a solution

Hi everybody,

i want to create exception policies via REST API and powershell with the following code:

$Header =@{Authorization='Bearer '+$SEPMAuthenticationToken}

$Body = @{
	name = "TestExceptionREST"
	desc = "TestExceptionREST"
}

$BodyJSON = $Body | ConvertTo-Json

Invoke-RestMethod -SkipCertificateCheck -Method Post -Uri "https://${SEPMIPAddress}:8446/sepm/api/v1/policies/exceptions" -Header $Header -Body $BodyJSON

As I understand the REST API Documentation (chapter 4.87) all body parameters are optional so i should be able to create an exception with just a name and description. However execution of the Invoke-RestMethod commandlet always results in the following error:

Invoke-RestMethod : {"errorCode":"500","appErrorCode":"","errorMessage":"Internal Server Error"}

Can you give a working example for the creation of an exception policy via REST API?

Thanks in advance

P.S. there are many inconsistencies in the REST API that make life harder than it has to be imho

0

Failed deinstall of SEP

$
0
0
I need a solution

Hello,

first of all, excuse me for my bad English :)

I've got a problem with deinstalling SEP. I used it on my Windows 7 PC. Then I upgraded Windows 7 to Windows 10 while keeping all datas and programms which worked fine. I tried to deinstall SEP then to use Windows Defender.

Here is my problem: Windows Defender cannot be activated. When opening the "Security at a glance", I see "Symantec Endpoint Production is inactive". When trying to activate or open it, nothing happens (obviously because I deinstalled earlier). But it seems like Windows Defender isn't active either, because Windows stills thinks that I use SEP. And I don't find an option for activating Windows Defender.

Can you help me deinstalling SEP or at least activating Windows Defender?

Thanks in advance :)

0

Disable Generic Exploit Mitigation

Configuring folder exceptions for SEP Linux Client

$
0
0
I need a solution

Hi all,

How do I configure folder exceptions for a linux OS? Anyone that has done this before?

Does the Exception policy work and if so how would I add the folders as an example. Would just adding the exact
path shown below work?

/usr/sap/hostctrl

/usr/sap/DAA

/usr/sap/hostctrl

Thanks

T

0

SEP standard client vs dark network client

$
0
0
I need a solution

Our servers, without stable connection to Internet, are installed with SEP 14.X standard client, and get virus definition update from our internal SEPM server.

I did not know there is a so-called "dark network client" until recently. When I saw the difference between the 2 versions, I was pretty shocked:

https://support.symantec.com/us/en/article.howto12...

Can anyone explain to me the difference about virius definition?

Standard client is "download latest definition only", "use definition in the cloud";

while the dark web client is "full set of definition".

If our servers cannot connect to Internet, does that mean their SEP (standard client) are not able to detect some virus due to lack of some definitions?!?!?!

0

SEPm Web Access Certificate

$
0
0
I need a solution

Hi All,

I want to change the SEPm Web Access Certificate. the current certificate is self sign.

* it is a different certificate from the client - server communication right ?

Thanks,

0

SEP configuration to automatically report new malware to Symantec in a timely manner

$
0
0
I need a solution

Hello team,

I just need an help to know if SEP can have the capability to report new malware to Symantec in a timely manner .

That mean, if new malware detected is SEP can be able to report?

0

SEP Hybrid

$
0
0
I do not need a solution (just sharing information)

With the Cloud intergration of SEP has it improved any in the last year? I heard at that time that it wasnt worth the move, has this changed?

0

Can Symantec Endpoint Protection 14.2 be installed and work offline?

$
0
0
I do not need a solution (just sharing information)

Hi Everyone,

I would like to install Symantec Endpoint Protection on our computers in local network, but we mustn't connect anyone to internet anytime now and later. Is it possible to install SEPM, deploy clients on other computers this way without any interferences? Can SEP work offline? Do we need to uninstall LiveUpdate while doing that or is it necessary to work with .jdb files and working with other nodes? Are there any other tips i need to know?
 

Thanks in advance for answers

0

Install SEP to Remote Computers having Issue with Administrator Account

$
0
0
I do not need a solution (just sharing information)

After many failed, deploy SEP to computer clients many times, I have found that, 

1. If i deploy by using Build-in admin account (Enable and Set password on that account), It can success deployment BUT
2. If i deploy by using created admin account (Full Permission as build-in account), It cannot success deployment. 

So Do you have any solutions to fix this issue, due to we don't want to enable Build-in admin account for security reason! 

NOTED: Our Computers is WORKGROUP, Not yet in Domain. FYI

0
Viewing all 10484 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>