Endpoint Protection

HI,

We are using SEP 11.0 MR4MP1a.

Currently whenver we deploy any policy with regards to Application and Device control to the client machines, the users gets the attached notification.



Can we disbale such notifications by any chance.  Also i don't it is necessary to restart the machine fo rthis policy to get applied.

Any suggestions.

Rgrds,
SAM

If u apply An Application and Device Control Policy  you need to restart the machile to get ur policy applied.

For the noification u have to manually configure it.

Hi Ajitha,

Can you pls check for restart as here the policy i already into effect without restarting.

Secondly, pls let us know from where to disable/configure the notification.

Rgrds,
SAM

first i would like to tell ajit that the machine does not require a restart for the policy being applied to clients, it will automatically get the new policy as the time is mentioned in the server of how the clients will check for policy updates.
Secondly Sam you can try looking into 2 things
a) In the application control policy if you edit an existing application control policy u will find an enable logging checkbox in the top right hand conrner of the screen, youcan uncheck that and see if the notification stops or not.
b) In the device control policy setting you will see a notification area at the bottom of the screen saying that "Notify users when devices are blocked" chek that if the check box is checked there or not. uncheck it and i think your problem will be solved.

Hi,

I think first time we need once restart to apply the policy for App control then after it will take automatically.

Hi mansoor,
I have tried this in my server, but it did not require a restart

HI Sapta,

I've unchecked the check box, but still the notification appears..

Any more suggestions.....

Rgrds,
SAM

 I think first time we need once restart to apply the policy for App control then after it will take automatically.

Hi sam,
in the application and device control policy select the blocking rule and you will find two tabs in the right hand side pane, properties and actions tab. In the actions tab there is a notify user check box, disable that and try....

SApta,

Both of them are already disable since we have created rule.

This Tab is for some other purpose.

Pls check.

Rgrd,
SAM

Hi sam,
Can you tell me the exact notification that is showing on the client side???

HI,

The notification is  "Please restart your computer to enable Application and Device Control Ploci changes."

I have already attached in my posting.

Please check my first posting.

Rgrds,
SAM

Hi sam,
is your version 11.0.4014.26?

HI,

As mention in my first POST. it is MR4MP1a. Pls check my first post.

Rgrds,
SAM

Also i've checked symantec website/KB and it is mandatory that the users will get notification whenever their is a deployment of Application/Device control policy.

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/b54beb2f46268ccc882574e80052960f?OpenDocument

Check the last sentence in the above link.

Hence we dont need such notificaitons on the user end.

Symantec Team!!!! any suggestions.

Rgrds,
SAM

My two cents on this-  I would want Symantec to give us the admins an option of disabling notification of application/device control policy. You only have unnecessary brouhahha from the employee community when policy changes are done that ties them down...

Ajitjha can you please help to resolve this issue