Endpoint Protection

 View Only

  • 1.  how to hide notifications

    Posted Feb 02, 2012 03:54 AM

    hi there,

    on one of my computer, message is popping out that "Traffic from IP address x.x.x.x is blocked from 01/01/2012 4:44 pm to 01/01/2012 5:00 pm".

    i wnat that this message was not popping out any more..

    how to disable it?



  • 2.  RE: how to hide notifications

    Posted Feb 02, 2012 04:22 AM

    Hi,

    Check the following artical

    http://www.symantec.com/business/support/index?page=content&id=TECH105013

    Thanks.



  • 3.  RE: how to hide notifications

    Broadcom Employee
    Posted Feb 02, 2012 04:56 AM

    Hi,

    You will have to disable Intrusion Preventsion System (IPS) Notifications, you can accomplish following task through SEPM console.

    However I would suggest to troubleshoot further on this issue.

    Blocked IP address is from internal network or it's unknown IP ?

    If it's internal IP address, you can exclude IP address through IPS policy.

    It is's unknown IP address, check for System vulnerability. 

    It is recommended to install all the Symantec features AV / PTP/ NTP with latest definitions.Always make sure that your computers are receiving definitions regularly.

    You windows machines should have all the latest windows updates /Patches.

    To Disable Intrusion Prevention notifications for Server Control Mode:

    1. Log in to SEPM
    2. Select Clients on the left
    3. Choose the appropriate group
    4. Select the Policies tab
    5. Expand Location-Specific Settings and select Server Control next to "Client User Interface Control Settings"
    6. Click the Customize button next to "Server Control"
    7. Uncheck "Display Intrusion Prevention Notifications"

    To Disable Intrusion Prevention Notifications in Mixed Mode:

    1. Log in to SEPM
    2. Click on Clients on the left
    3. Choose the appropriate group
    4. Click the Policies tab
    5. Expand Location-Specific Settings and click Mixed Control next to "Client User Interface Control Settings"
    6. Click the Customize button next to "Mixed Mode"
    7. Scroll to the bottom of the list, and in the "notifications" area, click the radial in the "Server" column to give you the ability to override this option on a client.
    8. Select the Client User Interface Settings tab 
    9. Uncheck "Display Intrusion Prevention notifications"

    I hope it will help you !!!



  • 4.  RE: how to hide notifications

    Posted Feb 02, 2012 05:24 AM

    To Disable Intrusion Prevention Notifications in Mixed Mode, what it means?



  • 5.  RE: how to hide notifications

    Posted Feb 02, 2012 06:16 AM

  • If the client is set to Server Control mode, the user cannot create any firewall rules or alter firewall and Intrusion Prevention System (IPS) settings.

  • If the client is set to Client Control mode, the user can create firewall rules and change all firewall and IPS settings.

  • If the client is set to to Mixed Control, the user can create firewall rules and has some control over firewall and IPS settings.



  • 6.  RE: how to hide notifications

    Broadcom Employee
    Posted Feb 02, 2012 06:19 AM

    Hi,

    There are three control modes.

    Server Control : Gives the users the least control over the client. Server control locks the managed settings so that users cannot configure them.

    Client Control : Gives the users the most control over the client. Client control unlocks the managed settings so that users can configure them.

    Mixed Control : Gives the user a mixture of control over the client.

    Mixed control has the following characteristics:

    • Users can configure the firewall rules and application-specific settings.

    • You can configure the firewall rules, which may or may not override the rules that users configure. The position of the server rules in the Rules list of the firewall policy determines whether server rules override client rules.

    • You can specify certain settings to be available or not available on the client for users to enable and configure. These settings include the Network Threat Protection logs, Client Management logs, firewall settings, intrusion prevention settings, and some user interface settings.

    • You can configure Virus and Spyware Protection settings to override the setting on the client, even if the setting is unlocked. For example, if you unlock the Auto-Protect feature and the user disables it, you can enable Auto-Protect.



  • 7.  RE: how to hide notifications

    Posted Feb 02, 2012 06:45 AM

    Please try this article.

    https://www-secure.symantec.com/connect/forums/front-end-pop-users-how-turn-it



  • 8.  RE: how to hide notifications
    Best Answer

    Posted Feb 02, 2012 06:48 AM

    Hi  Constantine,

    You need to disable IPS notification...see the screen shot



  • 9.  RE: how to hide notifications

    Posted Feb 02, 2012 06:48 AM

    ok understand,

    i made changes on SEPM...

    ill monitor for a while....

     

    thanks for help



  • 10.  RE: how to hide notifications

    Posted Feb 02, 2012 07:10 AM

    Hi...plz mark as solution the most relevant answer.....



  • 11.  RE: how to hide notifications

    Posted Feb 03, 2012 02:40 AM

    thanks guys for help