What settings are stored in each of the .DAT files in the Symantec Endpoint Protection 11.x folder?

Article:TECH102410  |  Created: 2007-01-06  |  Updated: 2009-01-03  |  Article URL http://www.symantec.com/docs/TECH102410
Article Type
Technical Solution

Product(s)

Issue



What settings are stored in each of the .DAT files in the Symantec Endpoint Protection 11.x folder?


Solution



This table lists the purpose of each of the .DAT files in the agent folder. Serdef.dat is the main file for the server profiles.

Filename Settings stored Misc details
Backup.dat Backup of serdef.dat Used when the client switches between client control and server control mode
Cltdef.dat Client profile (client control mode)
Default.dat Not used in 11.x - Default firewall rules (Default.dat and stddef.dat are identical)
Protection.dat Defines which Windows API's are hooked by OS Protection
ProtectionXXXX.dat System Lockdown list (XXXX in filename is MD5 of unencrypted data)
Sdi.dat Intrusion Prevention Library IDS signatures
Serdef.dat Server profiles (server control mode) (Firewall/Host Integrity/OS Protection/etc.)
SerState.dat Agent status information (detected applications list/HI result/User Information/etc.)(SerState.dat and TState.dat are identical)
Server.dat Temporary holding place for policies downloaded from SEPMPolicies are stored here before being applied to serdef.dat
Stddef.dat Not used in 11.x - Default firewall rules (Default.dat and stddef.dat are identical)
TState.dat Not used in 11.x - Copy of SerState.dat (SerState.dat and TState.dat are identical)
Country.datList of country codes(text file)
Metadata.datIDS Signatures metadata (11.x engine)(xml)
Moniker.datList of content updates(text file)
Platform.datList of OS codes(text file)
Scancfg.datScan Submission info(text file)
Sigs.datIDS signatures (version 11.x engine)


Legacy ID



2007090610224048


Article URL http://www.symantec.com/docs/TECH102410


Terms of use for this information are found in Legal Notices