Video Screencast Help
Protect Your POS Environment Against Retail Data Breaches. Learn More.

How to pop up attack detected by Symantec for clean or delete option for manual option for IT Group from SEPM

Created: 31 Aug 2014 | 6 comments
prasun's picture

Is there any option to pop alert for item detected by Symantec Endpoint protection from SEPM for a particular group.

First Action: Clean

Second Action: Quarantine  these are automatic can we have manual action for this for particular group through SEPM.

 

Operating Systems:

Comments 6 CommentsJump to latest comment

James007's picture

See below articles and Actions options

Symantec Endpoint Protection Manager 12.1 - Virus and Spyware Protection - Policy explained

Article:TECH190753  | Created: 2012-06-11  | Updated: 2013-01-15  | Article URL http://www.symantec.com/docs/TECH190753

Symantec Endpoint Protection Manager - Antivirus and Antispyware - Policies explained

Article:TECH104430  | Created: 2008-01-20  | Updated: 2010-12-21  | Article URL http://www.symantec.com/docs/TECH104430
.Brian's picture

Yep, break inheritance on the group and create a new AV policy just for this group.

In the AV policy under Auto-Protect >> Actions tab configure as you need it.

Then on the Notifications tab, edit this as you see fit.

Save the changes and assign this policy to the group.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

prasun's picture

I need user action pop which shows  such as allow or clean or log or quarantine when symantec detects attack than symantec default action delete,qurantine or log which is configured.

When attack is detected it asks for users to perform action than it automatic performs.

.Brian's picture

Yea so follow the guidance I posted

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

prasun's picture

Done but it only either log ,qurantine , delete or clean but no prompt for user action.

Only prompt option is there in download protection for Unproven files.

.Brian's picture

It's not possible to set a user action, other than for download insight. Otherwise what you see is what you get

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.