Hi Team:

I would like to know if i can block the access to directory portal of SEPM. When i migrate from sepm 11 to 12 version this service was enabled. I want to block the access modifying the tomcat files.

The version of this product is SEPM 12.1.1000.157 on Windows 2008.

hi 

check this doducment

How to block Remote Web Console access to the Symantec Endpoint Protection Manager

http://www.symantec.com/business/support/index?page=content&id=TECH147069

You can add here under Admin >> Server >> Edit Server Properties:

HI,

Check this thread

https://www-secure.symantec.com/connect/forums/how-do-i-turn-sepm-web-console

How to block Remote Web Console access to the Symantec Endpoint Protection Manager

http://www.symantec.com/docs/TECH147069

Dear Team:

The answers that you post is relationated to how restric the acceso to Web Console in SEPM (this configuration is applied in my server for allowed only 2 ip address).

The problem is the https://sepm-server:8443/portal service is allowing the access to every one in my network, and i want to restric the access only for administrators.

If anyone know to disable o configure this, please post the solution.

block this as a website or give the restriction in IIS folder.

http://service1.symantec.com/SUPPORT/ent-security.nsf/2326c6a13572aeb788257363002b62aa/9c561a4628b3c9a44925747f007b19cd?OpenDocument

Hi,

You can blocked site for SEPM firewall

Allow and Block websites using Symantec Endpoint Protection Firewall

http://www.symantec.com/connect/videos/allow-and-block-websites-using-symantec-endpoint-protection-firewall

How To Block Internet address via Sep Manager Firewall Rule

https://www-secure.symantec.com/connect/articles/how-block-internet-address-sep-manager-firewall-rule

Thanks people, but the situation is:

• I can not active the firewall componente or intrution prevention of SEP in server with SEPM
• I no want to active the Windows Firewall

Anyone modified the TOMCAT configuration because this is the motor web of SEPM. IIS no administrate this.

See this article on tomcat security and how to control access

http://www.mulesoft.com/tomcat-security

the folder where it gets picked up from is under tomcat\portal have you tried setting permission on this folder.

Is very dificult this issue, no?

I still have the access.

Should I open a ticket in Symantec for this?

If you've tried the above suggestions with no success than yes open a case