Endpoint Protection

 View Only
  • 1.  Application and device control Features

    Posted Dec 05, 2011 01:13 AM

    Can somebody help me out with a list of things thatSEP12 - Application & Device control can do.

    I'm listing some of the things known to me,

    1.)Blocking devices.

    2.)Blocking exe applications.

    3.)Blocking IM and P2P applications.

    4.)Restricted USB access.

    Let me know if anything else can be done with Application and Device control.

     

    Waiting for the reply



  • 2.  RE: Application and device control Features

    Posted Dec 05, 2011 01:25 AM

    Hi Shiva,

     

    I Think you can be block Songs Ext.

    Exmpale:-.3gp,Mp3 and many more....

     

     

    Thanks Ashish Sharma



  • 3.  RE: Application and device control Features

    Broadcom Employee
    Posted Dec 05, 2011 01:32 AM

  • *Make all removable drives read-only
  • *Block programs from running on removable drives
  • *Block applications from running
  • *Protect client files and registry keys
  • * stop threats
  • * stop autorun
  • check this article
  • http://www.symantec.com/business/support/index?page=content&id=TECH104431


  • 4.  RE: Application and device control Features



  • 5.  RE: Application and device control Features

    Posted Dec 05, 2011 04:30 AM

    https://www-secure.symantec.com/connect/articles/troubleshooting-articles-symantec-endpoint-protection-version-121

    Regards



  • 6.  RE: Application and device control Features

    Trusted Advisor
    Posted Dec 05, 2011 06:28 AM

    Hello,

    Here are the Few Articles on Symantec Endpoint Protection 12.1 in reference to your Issue.

     

    About Application and Device Control policies
     
     
    About application and device control
     
     
    About the structure of an Application and Device Control policy
     
     
    I hope these articles provide you all the information, you are looking for.


  • 7.  RE: Application and device control Features

    Broadcom Employee
    Posted Dec 05, 2011 10:23 AM

    Hi,

    Features supported on 64 bit OS         

    -AV                                                                  

    -Proactive threat Scan (a.k.a truscan or Sonar)     

    -Bloodhound                                                      

    -Malheur                                                            

    -Tamper Protection                                            

    -Internet email scanning

    -Device Control

    -Application Control

    -System Lockdown

    -Outlook Email Scanning

    -Lotus Notes Email Scanning

    -Right Click scan for viruses

    -Firewall

    -IPS

    -Application learning

    -Host Integrity (SNAC)



  • 8.  RE: Application and device control Features

    Posted Jan 18, 2012 10:29 PM

    Hi,

    Symantec Endpoint Protection Application and Device Control enables extra security protection for client systems. Simple rules created with Application and Device Control can enforce security policies and stop unknown malware.

     

    Block Attacks from removable drives
    Network worms take advantage of USB and other types of removable drives. Application Control can be used to block this attack vector while still allowing an organization to use removable media like USB drives.
     
    Prevent unknown PDF attacks
    Web-based attacks are often hiding inside a PDF file. An Application Control rule can easily stop known and known attacks that hide in PDF files by preventing Acrobat and Acrobat Reader from writing code to a machine.

    Prevent registration of new browser helper objects.
    Browser Helper Objects, also known as BHOs, are commonly used by threats to spy on or interfere with web browsing. If your organization does not allow BHOs or has a pre-installed set of allowed BHOs, you can block all unwanted BHOs.

     

    Additional helpful documents:

    Configuring Application and Device Control

    http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/7049d06ba3c9e86f802573620054d9c2?OpenDocument

     

    Creating an Application and Device Control Policy http://seer.entsupport.symantec.com/docs/331049.htm

    Using Application and Device Control to stop registry entries added by a threat or risk http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/07dcfaf99d61c063882575fa00705603?OpenDocument

     

    How to use Application and Device Control to limit the spread of a threat http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/5b5f6319ba48fda5882575990075e260?OpenDocument

    How to use Symantec Endpoint Protection to block or log legitimate but unauthorized software usage http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/d160be4b9941c53c88257674005536a3?OpenDocument

    Merging Application and Device Control Policies

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2010051009222048

    About application and device control
     

     

    Using Application and Device Control in Symantec Endpoint Protection (SEP) to block activity in common loading points for threats

    http://www.symantec.com/docs/TECH96766

     

    Hope this helps you!!



  • 9.  RE: Application and device control Features

    Broadcom Employee
    Posted Jan 19, 2012 12:43 AM

    most importantly

    Application and Device Control supports computers running 64-bit operating systems. Which was not there in Win 32 OS.

    The Firewall policy and Application and Device Control policy have additional rules templates to help you create commonly used rules.

     

    you can refer this article as well

    http://www.symantec.com/business/support/index?page=content&id=TECH163413
     



  • 10.  RE: Application and device control Features

    Posted Jan 31, 2012 07:35 AM

    In SEP 12.1 Application and Device Control policy is supported on 64bit clients also

    Regards