Endpoint Protection

 View Only

  • 1.  Please help deciphering Windows Event Error

    Posted May 07, 2010 10:15 AM
    Hi folks,

    I'm not quite sure what's going on here.  It appears that SEP is complaining about Altiris through DLP.  It's a bit confusing to me.  Can anyone help me figure out what's going on here and if I need another exclusion for something?  Thanks 


    
Event Type: Error
Event Source: Symantec AntiVirus
Event Category: None
Event ID: 45
Date:  5/7/2010
Time:  9:45:00 AM
User:  NT AUTHORITY\SYSTEM
Computer: FAI017672
Description:
  

SYMANTEC TAMPER PROTECTION ALERT

Target:  C:\Program Files\Altiris\Altiris Agent\Software Delivery\{01B54EB5-3679-4C73-9E10-E169D5A5EC59}\cache\AeXInvSoln.exe
Event Info:  Allocation Memory
Action Taken:  Logged
Actor Process:  C:\Program Files\Symantec DLP\Endpoint Agent\edpa.exe (PID 364)
Time:  Friday, May 07, 2010  9:45:00 AM
     


  • 2.  RE: Please help deciphering Windows Event Error
    Best Answer

    Posted May 07, 2010 10:20 AM
    You have to create a tamper protection Exclusion for edpa.exe .Refer this KB
    What should I do when I get a Tamper Protection Alert?