Endpoint Protection

 View Only
  • 1.  Checking 64 Bit Applications in Endpoint Protection Whitelist

    Posted Mar 17, 2013 09:38 PM

    Hi,

    I intend to use Symantec Endpoint Protection running in Lockdown mode to enforce Appliaction Whitelisting on Windows 7 64 bit running various 64 bit applications. To do this I need to create a File Fingerprint List for those 64 bit applications but my understanding is that the checksum utility provided with SEP only handles 32 bit applications. Can anyone suggest a workaround for incorporating 64 bits apps into the fingerprint list?

    Thanks.

     



  • 2.  RE: Checking 64 Bit Applications in Endpoint Protection Whitelist

    Posted Mar 17, 2013 09:42 PM

    Are you on SEP 12.1? All features are supported on 64 bit, including System Lockdown. Where did you see that checksum.exe won't handle 64 bit apps?

    I have this running in a test environment, 64 bit machines included.

    System Lockdown will not work on 64 bit machines running SEP 11.x. It is not supported so there is no workaround.

    Symantec Endpoint Protection 11.0 compatibility with 64-bit platform

    Article:TECH102143  |  Created: 2007-01-23  |  Updated: 2010-12-03  |  Article URL http://www.symantec.com/docs/TECH102143

     



  • 3.  RE: Checking 64 Bit Applications in Endpoint Protection Whitelist

    Posted Mar 17, 2013 09:50 PM

    Hi,

    I have the information second-hand from an organisation running SEP 12.1. They can run SEP in Lockdown mode but the checksums they generate to create the file fingerprint list can only be generated for 32 bit applications, not 64 bit.

    Can anyone confirm that the checksum utility in SEP 12.1 can handle 64 bit apps?

    Thanks.



  • 4.  RE: Checking 64 Bit Applications in Endpoint Protection Whitelist

    Posted Mar 17, 2013 09:57 PM

    It works just fine for me.

    The KB article for it does not mention it won't work

    Creating a file fingerprint list with checksum.exe

    Article:HOWTO81199  |  Created: 2012-10-24  |  Updated: 2013-01-30  |  Article URL http://www.symantec.com/docs/HOWTO81199

     

    Since System Lockdown is fully supported in 12.1 and no mention is made in the KB article of it not working for 64 bit, I don't see why it won't work. But as I said, it already works for me.