Endpoint Protection

Hello - this is Solanda Laswell with the Dept of Health Care Services.  Got a question on how to create an exception.  We have some contractors who are loading software on to two PCs.  When we run the program we come up with the following errors (see attachment).  The .exe that is tripping the  system is an essential part of the program.  How do i create an exception to allow this program to run?

thanks

Attachment(s)

error msg.docx   209 KB 1 version

Not sure if you're running 11.x or 12.1 but here are the How-To's for both:

Creating Centralized Exceptions Policies in the Symantec Endpoint Protection Manager 11

http://www.symantec.com/business/support/index?page=content&id=TECH104326&locale=en_US

Creating Centralized Exceptions Policies in the Symantec Endpoint Protection Manager 12.1

http://www.symantec.com/business/support/index?page=content&id=TECH183201

And if your clients are unmanaged:

How to add a Security Risk Exception on an unmanaged Symantec Endpoint Protection Client

http://www.symantec.com/business/support/index?page=content&id=TECH105721&locale=en_US

Creating Centralized Exceptions Policies in the Symantec Endpoint Protection Manager 11

http://www.symantec.com/business/support/index?page=content&id=TECH104326

Configuring a centralized exception for a folder for Windows clients

http://www.symantec.com/business/support/index?page=content&id=HOWTO27612

Check this thread

https://www-secure.symantec.com/connect/forums/centralaize-exception-exclude-some-file-scanning

Creating Centralized Exceptions Policies in the Symantec Endpoint Protection Manager 11

http://www.symantec.com/business/support/index?page=content&id=TECH104326&locale=en_US

How to verify that Symantec Endpoint Protection is set to scan all files

http://www.symantec.com/business/support/index?page=content&id=TECH94205

Hello,

These error messages (SesClu) are not releated with your application,it's something about sep client update module. So, you don't need to add any exceptions about that. Please follow the document below about your problem.

http://www.symantec.com/business/support/index?page=content&id=TECH145197

Regards,

Oykun

Kindly follow the following document.

Creating Centralized Exceptions Policies in the Symantec Endpoint Protection Manager

http://www.symantec.com/business/support/index?page=content&id=TECH104326

Configuring a centralized exception for a folder for Windows clients

http://www.symantec.com/business/support/index?page=content&id=HOWTO27612

http://www.symantec.com/business/support/index?page=content&id=HOWTO55204

Attach thread for guidance

https://www-secure.symantec.com/connect/forums/centralaize-exception-exclude-some-file-scanning

If you want to see exceptions at the client side, :

Note:To see the exclusions that the client creates, you can examine the contents of the HKEY_LOCAL_MACHINE\Software\Symantec\Symantec Endpoint Protection\AV\Exclusions registry. You must not edit this registry directly. You can configure any additional exclusions by using centralized exceptions.

On a 64 bit server using Exchange 2007 or 2010, the path in the registry to confirm auto exclusions is slightly different. The path includes the WOW6432node key.
HKLM\Software\WOW6432node\Symantec\Symantec Endpoint Protection\AV\Exclusions\.

Configuring a centralized exception for a folder for Windows clients

http://www.symantec.com/business/support/index?page=content&id=HOWTO27612

Hello,

What version of SEP 12.1 client are you running on the client machine?

What OS is this issue occurying on ?

As per the Screenshot, you are facing an issue - "Event ID 13 - Liveupdate returned a non-critical error. Available contents updates may have failed to install."

I would suggest you to follow the Articles below:

How to clear out definitions for a Symantec Endpoint Protection 12.1 client manually

http://www.symantec.com/docs/HOWTO59193

Event ID 13: "SescLU - LiveUpdate returned a non-critical error. Available content may have failed to install."

http://www.symantec.com/docs/TECH91615

Hope that helps!!

MZsolo- Your issue close or still pending?

thanks for sharing !

Hi

Configuring a centralized exception for a folder for Windows clients

http://www.symantec.com/business/support/index?page=content&id=HOWTO27612

Regards

it was an issue - we just decided to upgrade the server itself to 2008 and start fresh.

thanks

Hi Sameer,

Does by putting the binary in exception, any file in that directory will be ignored by SEP client ?

Only the binary you specified would be ignored.

Thanks Brian. ! that does make sense.