About Tamper Protection

Article:HOWTO54896  |  Created: 2011-06-29  |  Updated: 2011-12-20  |  Article URL http://www.symantec.com/docs/HOWTO54896
Article Type
How To


Subject


About Tamper Protection

Tamper Protection provides real-time protection for Symantec applications that run on servers and clients. It prevents non-Symantec processes such as worms, Trojan horses, viruses, and security risks, from affecting Symantec resources. You can configure the software to block or log attempts to modify Symantec resources.

Note:

Tamper Protection runs on Windows clients only. It does not run on Mac clients.

If you use third-party security risk scanners that detect and defend against unwanted adware and spyware, these scanners typically affect Symantec resources. If you have Tamper Protection enabled when you run such a scanner, Tamper Protection generates a large number of notifications and log entries. A best practice for Tamper Protection is to always leave it enabled. Use log filtering if the number of the events that Tamper Protection generates is too large.

You can turn off Tamper Protection notifications on client computers. You can also create exceptions for the applications that Tamper Protection detects.

See Creating a Tamper Protection exception

When a client is installed as a managed client, Tamper Protection has the following default values:

  • Tamper Protection is enabled.

  • The action that Tamper Protection takes when it detects a tamper attempt is to log the event only.

  • Tamper Protection does not notify the user when it detects a tamper attempt.

Note:

When notifications are enabled for tampering attempts, notifications about Windows resources are sent to affected computers as well as notifications about Symantec resources.

See Changing Tamper Protection settings

When a client is installed as an unmanaged client, Tamper Protection has the following default values:

  • Tamper Protection is enabled.

  • The action that Tamper Protection takes when it detects a tamper attempt is to block the attempt and log the event.

  • Tamper Protection notifies the user when it detects a tamper attempt.


Legacy ID



v45030986_v59371755


Article URL http://www.symantec.com/docs/HOWTO54896


Terms of use for this information are found in Legal Notices