Endpoint Protection Small Business Edition

 View Only
  • 1.  How to add a host in the Intrusion Prevention

    Posted Aug 22, 2012 12:21 PM

     

    Hello All

     

    I need to add a host to the Intrusion Prevention because I have to do a scan in my network and every time that the client detect a massive traffic from the scanner machine, this IP is blocked.

     

    I found that if I disable the Network Intrusion Prevention, the scan run fine but I don't want to put my network in a Risky State. Reading, I found that on the Intrusion Prevention Setting should be an option to add the host, but as you can see in the attachment, I don’t have this option.

     

    I'm running version 12.1.671.4971 and according Live Update, this is updated.

     

    Any advise?

     



  • 2.  RE: How to add a host in the Intrusion Prevention

    Broadcom Employee
    Posted Aug 22, 2012 12:39 PM

    create a group add a client machine to the group. enable the IPS policy.



  • 3.  RE: How to add a host in the Intrusion Prevention

    Posted Aug 22, 2012 12:45 PM

    I already have a few groups assigned to differents machine ans the IPS policies are applied, even if I disable the Network Intrusion Prevention and after this I Assign it to a Group, it works fine.

    But, I don't have the option to add the host as I show in another Post.

     

    Help!!!! Thanks!!!!! :)



  • 4.  RE: How to add a host in the Intrusion Prevention

    Broadcom Employee
    Posted Aug 22, 2012 12:59 PM

    i do not think small business have excluding of host as in entrprise.



  • 5.  RE: How to add a host in the Intrusion Prevention

    Posted Aug 22, 2012 01:04 PM

    OOOpsss.

    That mean that the only way is to sible the Network Intrusion Prevention or upgrade to Enterprise?

    Do you know how can I upgrade it?

     

    Thanks



  • 6.  RE: How to add a host in the Intrusion Prevention

    Broadcom Employee
    Posted Aug 22, 2012 01:21 PM

    check this option available in enterprise. is this you looking for?

    toupgrade to enterprise, you need to contact syamantec partner or sales.



  • 7.  RE: How to add a host in the Intrusion Prevention

    Posted Aug 22, 2012 01:46 PM

    Yes, this is the option. Thanks. I will contact them



  • 8.  RE: How to add a host in the Intrusion Prevention

    Trusted Advisor
    Posted Aug 23, 2012 03:20 AM

    Hello,

    Correct. In Symantec Endpoint Protection SBE 12.1, the option to exclude host is not available.

    Please Mirate the SEPM / SEP SBE 12.1.671 to the SEP EE 12.1 RU1 and then follow the Article:

    Setting up a list of excluded computers http://www.symantec.com/docs/HOWTO55407

    Hope that helps!!



  • 9.  RE: How to add a host in the Intrusion Prevention

    Posted Nov 05, 2012 01:13 AM
      |   view attached

     

    Dear

    Please follow the mentioned procedure to unblock your machine.

    1)      Open SEPM server Console.

    2)      Go to Policy Tab.

    3)      Click on Intrusion Prevention Policy.

    4)      Click Edit Policy.

     

     

    5)      Go to Exceptions and click on Add.

     

    6)      Select your block machine ID Number (This ID number popup show on your blocked system with IP Address).

    7)      Please select your SID number.

    8)      Click on Next and change Action to Allow.

     

    9)      After that your machine should be allowed on Intrusion Prevention.

    Attachment(s)