Endpoint Protection

I've recently inherited a SEP 12.1 enviroment that was a bit out of date and with some custom policies.  I've updated SEP to 12.1.4 but now I'd like to tackle the policies.

Is there a Symantec Best Practices for each of the policies out there anywhere?

There is a bunch of best practices/explanations to go thru :)

Security Best Practice Recommendations

Security Response recommendations for Symantec Endpoint Protection 12.1 settings

Symantec Endpoint Protection Recommended Best Practices for Securing an Enterprise Environment

Best Practices for Deploying Symantec Endpoint Protection's Application and Device Control Policies

Symantec Endpoint Protection Manager 12.1 - Virus and Spyware Protection - Policy explained

Symantec Endpoint Protection Manager 12.1 - LiveUpdate - Policies explained

Default Symantec Endpoint Protection 12.1 RU1 Firewall Policy explanation

Symantec Endpoint Protection Manager - Centralized Exceptions - Policies explained

Symantec Endpoint Protection Manager - Intrusion Prevention - Policies explained

Best Practices for Symantec Endpoint Protection Location Awareness

Happy reading!

Hi RTedrow,

The first thing I recommedn reading is this article- ensure that you are following all of its recommednations:

Symantec Endpoint Protection – Best Practices
http://www.symantec.com/theme.jsp?themeid=stopping_malware&depthpath=0

 

Also: monitor your SEPM's logs!  What story are they trying to tell you?  Adjust your policies to deal with that story.

Hope this helps!

Mick