Video Screencast Help

how to block access to hosts file

Created: 19 Feb 2013 • Updated: 25 Feb 2013 | 3 comments

Hello All,

 

I have created a policy on SEPM to block write, delete, replace on hosts file..

 

It is working perfectly. When I try to edit that file, I receive DENY from SEP Client.

 

My problem is when I edit, replace this file, using \\pc_to_change\c$\windows\system32\drivers\etc it is possible..

 

Well, How can I block it???

 

Thanks

 

Diego

Comments 3 CommentsJump to latest comment

Mithun Sanghavi's picture

 

Hello,

Try UnLocking the ADC Policy.

Check this Article:

How do I Block hosts file modification using Symantec Endpoint Protection (SEP) Application and Device Control policy?

https://www-secure.symantec.com/connect/downloads/how-do-i-block-hosts-file-modification-using-symantec-endpoint-protection-sep-application-

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Sumit G's picture

Duplicate thread

https://www-secure.symantec.com/connect/forums/blo...

 

 

Check this thread

https://www-secure.symantec.com/connect/forums/hos...

 

Hardening Symantec Endpoint Protection (SEP) with an Application and Device Control Policy to increase security

Article:TECH132337  |  Created: 2010-01-08  |  Updated: 2012-03-13  |  Article URL http://www.symantec.com/docs/TECH132337
 

 

Regards

Sumit G.