Endpoint Protection

Hi...

I need Help.

I dont know how create an exclusion for a program in  the rule "Stop Software Installer [AC8]" in endpoint protection.

I enter in edit in this rule and i create a exclusion as follows:

\\SQL_PELIKAN\*

To exclude all executables who are in this share folder.

Even if i created this exception in the rule not allowed the execution for executables in this server.

 

 

I don't it will work for remote shares. Is that what this is?

What I need is to create a rule or an exception to allow the installation of software that is in a shared folder. And lock the other software installation.

What I need is to create a rule or an exception to allow the installation of software that is in a shared folder. And lock the other software installation.

You can add to centralized exception Pl check this article Title: Creating Centralized Exceptions Policies in the Symantec Endpoint Protection Manager 11 Article:TECH104326 Article URL http://www.symantec.com/docs/TECH104326 You can also apply the rule in your way using fingerprint Title:Creating a file fingerprint list with checksum.exe Article:HOWTO81199 Article URL http://www.symantec.com/docs/HOWTO81199 When edit the rule you can view option button and you can add your software finger print.

Have you tried adding it to the list of processes in the first rule?   That process that match rule are allowed to install.

and you are allowed to specify Netork Drives under "Only match processes running from the following drive types"

Are you able to copy the file  "Stop Software Installer [AC8]" from your Share drive to Local host with out any issues ? OR, Is it getting blocked while copying ?

Give a glance to this link

http://www.symantec.com/business/support/index?page=content&id=TECH102525

Network Threat Protection rules are blocking a legitimate application from accessing the network, and you wish to allow this legitimate traffic.

 http://www.symantec.com/docs/TECH104526

Erm, the exclusion you're adding will allow any application to create, delete or modify exe and dll files in the location you designated (the network share).

This exclusion will not allow you to install from that location (if that's what you're trying to do).

To flick this around and allow you to install from that location, you need to add the share and installer to the earlier rule (see my screenie attached).  This will allow the target process to create exe and dll files in any place on the local machine.