Video Screencast Help

Difference between Insight, Insight lookup & Download insight.

Created: 09 Apr 2014 • Updated: 09 Apr 2014 | 6 comments
This issue has been solved. See solution.

I would like to know - Difference between Insight, Insight lookup & Download insight. In short.

I assuming Insight lookup & download insight are same, only difference in lookup configred in sched scan & download insight in Virus & spyware policy window.

Operating Systems:

Comments 6 CommentsJump to latest comment

Rafeeq's picture

download insight is used when you try to download some file  from internet, that file will be scanned (looked ) in symantec database using internet to see if that file is good or bad

Brɨan's picture

Here:

Expected behavior of Download Insight

How Symantec Endpoint Protection uses reputation data to make decisions about files

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

erockjam's picture

Symantec Insight (aka Insight Lookup) is a reputation-based security technology that classifies every
single software file, good or bad, on the Internet. Several components within SEP use Insight to check file reputation.

Download Insight specifically evaluate the reputation of files being downloaded from the internet through various portals, such as IE, Chrome, Firefox, etc.

Here are some good reads and a video to explain more:

Insight Whitepaper

How the Insight Lookup process works

Expected behavior of Download Insight

VIDEO: Symantec Endpoint Protection 12: Insight

SOLUTION
Chetan Savade's picture

Hi,

Thank you for posting in Symantec community.

Symantec Insight:Symantec Insight is a reputation-based security technology that leverages the anonymous software adoption patterns of Symantec’s hundreds of millions of users to automatically discover and classify every single software file, good or bad, on the Internet. Based on advanced
data mining techniques, Insight seeks out mutating code separating outrisky, low-reputation files from those that are safe.

Download Insight - is a new advanced protection feature included with the SEP 12.1 clients. DI is a part of Auto-Protect protection. This feature allows the SEP client to leverage Symantec's Cloud-based reputation database when files are downloaded or executed directly from popular Web browsers, text messaging clients, and other portals. Supported portals include Internet Explorer, Firefox, Microsoft Outlook, Outlook Express, Windows Live Messenger, and Yahoo Messenger. Download Insight determines that a downloaded file might be a risk based on evidence about the file's reputation. Download Insight is supported only for the clients that run on Windows computers.

Expected behavior of Download Insight
http://www.symantec.com/docs/TECH171776
Managing Download Insight detections
http://www.symantec.com/docs/HOWTO55252
Customizing Download Insight settings
http://www.symantec.com/docs/HOWTO55253

Insight Lookup - uses the latest definitions from the cloud and the Insight reputation database to make decisions about files. If you disable Insight lookups, Insight Lookup uses the latest definitions only to make decisions about files. Insight Lookup also uses the Automatically trust any file downloaded from an intranet website option. Insight Lookup does not run on right-click scans of folders or drives on your client computers. Insight Lookup does run on right-click scans of selected files.

How the Insight Lookup process works
http://www.symantec.com/docs/TECH169282
How Symantec Endpoint Protection uses reputation data to make decisions about files
http://www.symantec.com/docs/HOWTO55275

Reference articles:

The Series consists of following articles:
Symantec Endpoint Protection Terminology Guide - Concepts, Technologies, Terms - Part 1 (A-G)
Symantec Endpoint Protection Terminology Guide - Concepts, Technologies, Terms - Part 2 (H-R)
Symantec Endpoint Protection Terminology Guide - Concepts, Technologies, Terms - Part 3 (S-Z)

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<