Endpoint Protection

 View Only
  • 1.  Endpoint Protection and Null sessions

    Posted Oct 18, 2014 02:54 PM

    I am seeing nullsessions being denided on some of my workstations.  Not int he thousands but occasionals.  I have narrowed it down to either SCCM or Symantec.  I know in SCCM you can set it to "share" updays with other machines on the local subnet to reduce over router traffic back to the server.  Does Symantec to anything like this?  If so would it use a null session to do it and is that a configurable setting?



  • 2.  RE: Endpoint Protection and Null sessions

    Posted Oct 18, 2014 02:57 PM
    SEP will use a GUP, which means one machine is designated to hand out updates to clients on a LAN instead of coming back to the SEPM for updates. However, it won't block this. Have you disabled the SEP firewall to see what happens? Are you even using a GUP?


  • 3.  RE: Endpoint Protection and Null sessions

    Posted Oct 18, 2014 06:37 PM

    Not that i am aware off. does this setup by default?  I inherited this network so not sure.



  • 4.  RE: Endpoint Protection and Null sessions

    Posted Oct 18, 2014 07:10 PM
    Would need to be setup, wouldn't be on by default.


  • 5.  RE: Endpoint Protection and Null sessions

    Posted Oct 18, 2014 07:29 PM

    Thank you guys.  I will have to check in the SEP Console