Changing Tamper Protection settings
|Article:HOWTO55266|||||Created: 2011-06-29|||||Updated: 2011-12-16|||||Article URL http://www.symantec.com/docs/HOWTO55266|
A best practice when you initially use Symantec Endpoint Protection is to use the action Log the event only while you monitor the logs once a week. When you are comfortable that you see no false positives, then set Tamper Protection to Block it and log the event.
The message that you create can contain a mix of text and variables. The variables are populated with the values that identify characteristics of the attack. If you use a variable, you must type it exactly as it appears.
To change Tamper Protection settings
Article URL http://www.symantec.com/docs/HOWTO55266