Endpoint Protection Small Business Edition

Hi there,
I am trying to find out 1 issue.

Suppose I've few clients in SEP. Internet is open for all. But, I want to controll their access in web sites, from SEP management console in server.
I mean, I will specify web addresses to specific clint (NOT in clent PC) in server console, so that he/she can't access those sites.
Am I clear?

Is it possible? If yes, then how?

You need to follow this document

How to block/allow website 

http://service1.symantec.com/support/ent-security.nsf/docid/2008070803545448

For clients you need to change it to user mode;  for specific users

Understanding computer and user mode in Symantec Endpoint Protection 11.0

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007101809192448

How to block all website and allow only certain websites using Network Threat Protection Firewall rule
How To Block Internet address via Sep Manager Firewall Rule

Hi,
I've studied both of your links & way to block. But I choose to Arvind's threat (2nd Link)-via Firewall. 1 thing I need to clear about applying the rule on the group. Look at my attachment.
Under "My company" - "magnus-server" is my server name. & I've all the user, NOT any group.
So, If group is mandatory to apply the rule, then I need to create group first & add the client to specific group? If yes, then is this process cause any change on my current antivirus settings or user?
Hope both of you realise what I am trying to say. Again, please observe the pics.

Another thing is, when the users will not attach with my network (laptops) then the policy work?

~r

"Magnus-server" is a group  If you do not want the rule to apply to all machines in that group then you will need to create sub groups by right clicking the group and select new group. 

In reference to the question you asked about the policy working when clients are not attached to the network.

The SEP client will use the last policy it received from the management server while on the network. When the client is not attached to the network, and unable to communicate with the management server, any policy changes you make to that client's group will not be applied to the client, until the client is back on the network, and able to check in with the management server.

You can verify what policy serial number a client is using by opening the local SEP client user interface. Click on Help > select Troubleshooting..... Under Management > General Information, you will see Policy Serial Number listed.

In SEPM you can apply policy in group level only not in individual client .So create a sub group,move the clients to that group  apply the policy for that group.In the case of clients which is not connected currently,when they connected back to SEPM they will receive this policy,.....

Hi,
I've created 1 subgroup under "magnus-server" named 'IT' & moved a user into 'IT' (pics 1).

Now after creating a firewall policy, I want to assign the new policy on 'IT'. But, when I try, then the subgroup 'IT' appearing as disable. So that I can't checked it indipendently (pics 2). But if I checked "magnus-server" then the total subgroups checked. But I want only subgrops, where I'll add users/computers.

Another thing: If the new policy applied on the group/subgroup, then what bout the default firewall policy?
Is ty harmfull to apply any new policy, if the default policy disabled after applying new policy?

~r

In SEPM client-->'IT' ---->policies ,uncheck inheritance ,you will be able to assign the policy.
If you apply new policy old policy will get removed and new one will became effective....

Hi Arvind,
ya...unchecking inheritance, its activbated. But, I did not use new fire wall policy yet.
Sorry, but I need to clear manythings before applying finally. It's about loosing default policy on "IT" clients!!!
There is default policies active on all clients under "magnus-server". I just move 1 client under "IT". So, after assigining the new policy (pic 02), old policy (pic 01) will become inactive & new policy will active (I just add Rul 0) in new policy.

So, If I moved the client again under "magnus-server", then that client will back under old policy, right?

~r

Yes you are right.If you move back to old group.Client will get that old group policy...

Dear All,

Pl share your coment on below mentioned issue:-

How can we check in SEP Client which policy is applied on. the client without using console .

Gagandeep

This is an old threads.So pls create a new thread for discussing your problem.