Does SEP preventing the user to change DNS IP Address?
SEP 12.1 can block DNS changes
This can be configured in the SONAR settings in the SEPM. It is under the AV policy
You can set an exception:
Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.
Thank you for quick response. So you mean there is no way changing DNS IP when SEP is enabled??
If you have the option set to Block than it will be stopped. You can set it to ignore or add an exception.
You can set one of the following actions to take for DNS changes
yes, if any malicious thing tries to change DNS the SEP will know it.
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
Could you please let us konw at which place you are trying to change DNS ip address?
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<