Firewall - auto detect location
Created: 08 Jan 2008 | Updated: 21 May 2010 | 7 comments
Hello.
I've been searching in the forums and KB but havent found an answer to my problem.
If you remember Firewall from XP SP2, you can configure it from GPO differente setings if its inside the domain and outside.
Im looking for a similar solution on the firewall component of SEP 11.
When the user is in office, the firewall must allow Filesharing (135,139) but outside an user is mostly on wi-fi or other dangerous internet connections, and i must block much more ports.
How do i this in SEP? Or cant i? It seems an obvious feature for a Business product but i cant find it.
Any help would be appreciated.
Thank you!
Jose
Discussion Filed Under:
Comments 7 Comments • Jump to latest comment
---------------- Things turn out best for the people who make the best of the way things turn out. -John Wooden-
if you are using SEPM to configure your clients, then this is easily achievable - simply click Clients, then select the Group you want to administer. Click the policies tab and on the left you will see several options, two of which are:
Add Location
Manage Locations
Add Location will take you to the add location wizard which walks you through the steps required and allows you to specify a subset of the criteria available to determine your location. Manage Locations takes you to a "advanced" version which shows the full power of location awareness and gives you all the options.
From either of these you can create a location based on criteria you would find in the office, specific IP subnets, DNS lookup, connection to policy manager, etc. The other location you leave blank for its criteria and that will then be used for everywhere else - I'd also recommend you make the "everywhere else" location the default, to increase security.
If you aren't using the SEPM, then I'm afraid there isn't currently a way of configuring location awareness through the SEP Client GUI - you could potentially create these locations on a SEPM then export an installation package containing them though.
Post back if you need more information on anything covered here
Message Edited by Paul Murgatroyd on 01-09-2008 01:24 AM
Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed: http://twitter.com/symc_endpoint
Yes Paul, thank you.
Found it.
Sorry but it wasnt obvious and i didnt find it in the documentation.
Let's hope it works well.
Seems to have a lot of options, which is good.
J.
Would you like to reply?
Login or Register to post your comment.