Endpoint Protection

How do I disable the Virus and Spyware Protection Policy? The box to uncheck "Enable this policy" is greyed out.

I believe this is the intended behaviour. If you try to withdraw the policy does it tell you it is not allowed?

If it's intended, then why is the option even there? The FW, HIPS, and ADC policies allow you to uncheck that box.

What do you mean by "withdraw"?

You can withdraw the policy from the location used by the group of clients.

Disabling or withdrawing the "Virus and Spyware Protection Policy" and "Liveupdate Settings Policy" is not an option. Its by design.

On the Clients page on the policies tab you can withdraw the policy. This is effectively same as disabling.

Yup, that is correct. If you try to withdraw the Virus and Spyware Protection Policy you get the following dialog:

"Virus and Spyware Protection policies cannot be withdrawn.

If you do not want to use Virus and Spyware Protection functionality, ensure that your client install packages do not include this functionality."

This is just impedes on troubleshooting. :(

Brian, go ahead and try it. That is not allowed.

Yep its not. You can disable autoprotect but cannot withdraw or remove the policy. Havent messed with much but i knew one or both was not allowed.

Yes, Seyad is right - this action is not allowed for AV policy. If you need to disable the AV protection for testing/troubleshooting on already installed clients you can instead disable only for example the Autoprotect = this will shut down the "live" AV protection.

Hi gwtdt,

Enable this policy option is grayed out & it's by design for Virus & Spyware and Liveupdate policy.

Withdraw the policy option is available however when you try to Withdraw the policy will get intended warning message as well.

You can fill the product enhancement form:

http://service1.symantec.com/DISCUSS/SUPPORT/feedback2.nsf/product+feedback

 

the policies are stored on the client 

http://www.symantec.com/business/support/index?page=content&id=TECH98049&locale=en_US

you can delete or rename during troubleshooting

The AV and LU policies cannot be withdrawn as per:
http://www.symantec.com/docs/HOWTO80907

Your options for disabling Virus and Spyware Protection on a permenant basis are to create a Virus and Spyware Policy that disables all the individual components, or change the installed feature set on a client to omit/remove "Virus, Spyware, and Basic Download Protection".

Hello,

Any Particular Reason you want to Disable these Policies??

The Option "Enable this Policy" with the Virus and Spyware Protection Policy - 

As mentioned above you cannot withdraw the policy from the specific gorup completely. This will trigger the error gwtdt mentioned above:

"Virus and Spyware Protection policies cannot be withdrawn. If you do not want to use Virus and Spyware Protection functionality, ensure that your client install packages do not include this functionality."