Atlanta Security User Group

I have a group of users that need to run the application AirParrot (to use AirPlay on a windows computer) on their computers. Once installed the app will run but will not be able to locate an airplay devise. I can disable SEP and it will find the devise. What I really need to be able to do is create a rule that makes SEP leave that app alone, but I need to push it down from the SEPM.

Thanks

Is there anything showing in the client logs to indicate what is being blocked? This will help to determine what type of exception needs to be made.

I can't find anything in the logs to indicate SEP blocking this app. Is there a certain log I should look at? I want to say it could be the firewall I might try the exception their instead of App exception. Do you have any other ideas of what I can try?

Thanks 

So it sounds like the app installs fine? If not, you would see something in the risk logs under Antivirus.

I would start with adding a firewall exception for it.

You can check the traffic logs under Network Threat Protection to see if there is anything in there.

Were you able to get this working?

HI,

You can create Firewall exception for application

Creating an allow application rule in a Symantec Endpoint Protection Manager (SEPM) firewall policy

http://www.symantec.com/business/support/index?page=content&id=TECH104526

Sorry I didn't update the post, I did get it working it was actually bonjour that was being blocked so I created firewall port exception for bonjour. I haven't figured out a better way yet, but I would like a more secure way then opening the ports up. Do you now of another way to allow bonjour more securely?

Allowing only the the port bonjour communicates on through the firewall is the best way to do this.