Endpoint Protection

 View Only

  • 1.  Peer to Peer Application blocking

    Posted Aug 14, 2013 03:06 AM

     

    Hi Vikram Kumar

     

    I have tried to implement Peer to Peer Application Blocking by using Application and Devices control and it will work fine

    1. Tested: when we click on Utorrent.exe and process will be killed by SEP client.
    2. Tested : we renamed Utorrent.exe to abc.exe then we are  able to access and download files

    Can I know more about blocking Peer to Peer Application from IPS or Firewall or Application and Devices Control ?

     

    Also I have checked below mention links.

    https://www-secure.symantec.com/connect/articles/what-do-p2p-applications-do-and-how-block-peer-peer-applications-p2p-using-symantec-endpoint



  • 2.  RE: Peer to Peer Application blocking



  • 3.  RE: Peer to Peer Application blocking

    Posted Aug 14, 2013 03:11 AM

    How to use Symantec Endpoint Protection to block or log legitimate but unauthorized software usage

     

    Article:TECH97618  |  Created: 2009-01-20  |  Updated: 2009-01-20  |  Article URL http://www.symantec.com/docs/TECH97618

    # Application blocked on firewall

    How to configure the SEP Firewall to block an application

     

    Article:HOWTO42281  |  Created: 2011-02-10  |  Updated: 2011-03-25  |  Article URL http://www.symantec.com/docs/HOWTO42281

     



  • 4.  RE: Peer to Peer Application blocking

    Posted Aug 14, 2013 03:20 AM

    Edit : Didn't see that , You have already checked the link

    You need to enable application montioring then find the Checksum , then add it in the rule. this will block even if the exe is renamed.



  • 5.  RE: Peer to Peer Application blocking

    Broadcom Employee
    Posted Aug 14, 2013 09:00 AM

    Hello,

    Thank you for posting in Symantec community.

    Thubms up to Rafeeq's advice.

    That's true if user rename the application it will work if it's not blocked by fingerprint.

    I would suggest to refer this article.

    Block Software By Fingerprint

    https://www-secure.symantec.com/connect/articles/block-software-fingerprint

    Here is Symantec's official article on the subject:

    How to use Application and Device Control to limit the spread of a threat.
    Article: TECH93451 | Created: 2009-01-15 | Updated: 2010-12-13 |
    Article URL http://www.symantec.com/docs/TECH93451



  • 6.  RE: Peer to Peer Application blocking

    Trusted Advisor
    Posted Aug 14, 2013 10:32 AM

    Hello,

    Check these Articles:

    Block Software By Fingerprint

    https://www-secure.symantec.com/connect/articles/block-software-fingerprint

    How to use Symantec Endpoint Protection to block or log legitimate but unauthorized software usage

    http://www.symantec.com/docs/TECH97618

    Secondly, check this discussion:

    http://www.symantec.com/connect/forums/how-block-skype-application-thru-sep-using-firewall-policy

    Video

    https://www-secure.symantec.com/connect/videos/allow-and-block-websites-using-symantec-endpoint-protection-firewall

    Hope that helps!!