Endpoint Protection Small Business Edition

 View Only
  • 1.  Have a list of programmes which i need to allow, all other remaining programms should be blocked. How can i do that?

    Posted Sep 26, 2013 06:44 AM

    HI everyone,

     

    I have a SEPM with 12.1.2 version and around 500 clients. I have a list of programmes or applications which should have only access  to run in work environment, all remaining applications should be blocked from installing and running. So whats the best way of doing it ?

     

    Regards,

    Anoop Jeevan.



  • 2.  RE: Have a list of programmes which i need to allow, all other remaining programms should be blocked. How can i do that?

    Trusted Advisor
    Posted Sep 26, 2013 07:14 AM

    Hello,

    Check this Article:

    How to utilize SEP 12.1 for Incident Response - PART 3

    https://www-secure.symantec.com/connect/articles/how-utilize-sep-121-incident-response-part-3

    Hope that helps!!



  • 3.  RE: Have a list of programmes which i need to allow, all other remaining programms should be blocked. How can i do that?

    Posted Sep 26, 2013 08:52 AM

    I would suggest using system lockdown in Blacklist mode:

    https://www-secure.symantec.com/connect/articles/how-utilize-sep-121-incident-response-part-2

    This allows you to set exclusions for apps that you want to run while blocking all others



  • 4.  RE: Have a list of programmes which i need to allow, all other remaining programms should be blocked. How can i do that?

    Posted Oct 04, 2013 02:50 AM

    @brian,

     

    What if the program path is in D drive instead of Cdrive?

    Regards,

    Anoop Jeevan.



  • 5.  RE: Have a list of programmes which i need to allow, all other remaining programms should be blocked. How can i do that?

    Broadcom Employee
    Posted Oct 04, 2013 03:16 AM

    provide file fingerlist as well to stop it from running.



  • 6.  RE: Have a list of programmes which i need to allow, all other remaining programms should be blocked. How can i do that?

    Posted Oct 22, 2013 09:58 PM

    @pete,

     

    How can we get finger prints? Do we need any tools to get finger prints of an aplication? or any other way to get finger prints?



  • 7.  RE: Have a list of programmes which i need to allow, all other remaining programms should be blocked. How can i do that?

    Posted Oct 22, 2013 10:14 PM

    To create a file fingerprint list, you can use the Checksum.exe utility. The utility is installed along with Symantec Endpoint Protection on the client computer. You can run this command on each computer image in your environment to create a file fingerprint list for those images. Checksum.exe creates a text file that contains a list of all executables on that computer and their corresponding checksums.

    You can run the utility from the command prompt. The file Checksum.exe is located in the following location:

    C:\Program Files\Symantec\Symantec Endpoint Protection

    See Creating a file fingerprint list

    https://www-secure.symantec.com/connect/articles/block-software-fingerprint



  • 8.  RE: Have a list of programmes which i need to allow, all other remaining programms should be blocked. How can i do that?

    Posted Oct 22, 2013 10:15 PM

    You can specify D: as well



  • 9.  RE: Have a list of programmes which i need to allow, all other remaining programms should be blocked. How can i do that?

    Posted Oct 22, 2013 10:16 PM

    Use checksum.exe it's included with SEP. See here:

    http://www.symantec.com/docs/HOWTO55451