Endpoint Protection

We getting popup message.Once insert the photon check the error in attachment 

Attachment(s)

error.docx   389 KB 1 version

Hello,

I would request you to check this Thread:

https://www-secure.symantec.com/connect/forums/sid-20386-ms-rpcss-attack-2-detected-help-please

and this Article:

http://www.symantec.com/security_response/attacksignatures/detail.jsp?asid=20386

Hope that helps!!

Hi,

Blocked IP address is from internal network or it's unknown IP ?

If it's internal IP address, you can exclude IP address through IPS policy.

It is's unknown IP address, check for System vulnerability. 

It is recommended to install all the Symantec features AV / PTP/ NTP with latest definitions.Always make sure that your computers are receiving definitions regularly.

You windows machines should have all the latest windows updates /Patches.