Endpoint Protection

Hi everyone,

I have blocked the media files with extension from SEPM server, is anyone have idea that how to delete/move these files ?

SEP product will delete the files if the file is detected as threat and action is configured to do so.

If you looking for move/delete the files which are not threat, you can do this using SNAC or even Symantec DLP.

I assume you have following situation (correct me if I am wrong):

• You want to prevent playing media files (e.g., mp3)
• Therefore, you have blocked them with an Application Policy
• But this policy not only prevents access but prevents deleting media files as well.

In this case, just add "explorer.exe" to the exceptions in your rule:

So it's forbidden to play media files for Windows Media Player or other players but Windows Explorer is allowed to delete them.

yes, i have the same condition which you have mentioned but before make the change, i have to give the brief explanation solution to customer, if u can give me complete architecture of this setting ....

Nice Stuff Greg.. 

The condition can look like this (as an example, mp3 and mpeg files are listed, you have to add all the stuff you want to block):

The action can be defined as follows:

After creating this rule set, don't forget to turn it to "Production" -- my favourite error

I have tried but it's not working.

the option is to only block the process. It will not delete/remove the file.

Hi Sunny,

You cannot delete the file but i believe you can initiate a script when it is detected. You can write a script to delete the file and link it to this.