Video Screencast Help

is PTP truscan working on all OS (except MAC and Linux)?

Created: 15 Apr 2010 | 11 comments

i need to know if anybody install sep client RU6 on SErver and x64 OS with Proactive threat protection
any issues about this?

Comments 11 CommentsJump to latest comment

sandra.g's picture

PTP Commercial Application List scanning is, I believe, the only thing supported on 64-bit and server OS.  The heuristic scanning is not available.  You will still be able to install it, it will read as green when updated, but will always say "Off".

I am not aware of any specific issues after installation.

sandra

Symantec, Information Developer
Installation, Migration, Deployment and Patching
User Protection & Productivity, Endpoint Protection

Don't forget to mark your thread as 'solved' with the answer that best help

Viachaslau Kabak's picture

hm...
strange
in SEP admin guid i found client features table (in attach)
i installed it on one of win7 x64 (earlier on win vista x64 we had problems and symantec support engineer told that PTP on x64 is not supported Case 320-111-988)

client_features.PNG
sandra.g's picture

I don't know the full details of your case, but here is what our documentation says about PTP and 64-bit compatibility:

From: 'Symantec Endpoint Protection 11.0 compatibility with 64-bit platform'
http://service1.symantec.com/SUPPORT/ent-security....

Q: Why does Proactive Threat Scan not detect test samples on Windows XP 64-bit operating systems?
A: Symantec Endpoint Protection 11.0 does not support the use of Proactive Threat Scan (Heuristics) on 64-bit operating systems.

From 'Proactive Threat Protection status shows "OFF" in the client interface'
http://service1.symantec.com/SUPPORT/ent-security....

On Windows server operating systems and Windows XP 64-bit operating systems, Proactive Threat Protection only supports Commercial Application List scanning or "CAL".  This is why the status shows as "OFF" in the client interface.

sandra

Symantec, Information Developer
Installation, Migration, Deployment and Patching
User Protection & Productivity, Endpoint Protection

Don't forget to mark your thread as 'solved' with the answer that best help

Viachaslau Kabak's picture

Last Modified: 12/17/2008
Date Created: 02/23/2007

nothing was changed since 2008?
i install PTP on x64 OS and PTP is ON

sandra.g's picture

I am not aware of any changes to PTP that would allow it to show "On" in the SEP UI for 64-bit or Server OSes.  Which version of SEP are you using?

sandra

Symantec, Information Developer
Installation, Migration, Deployment and Patching
User Protection & Productivity, Endpoint Protection

Don't forget to mark your thread as 'solved' with the answer that best help

sandra.g's picture

I'll have to ask around and dig into the KB.  I'll let you know what I find.

Symantec, Information Developer
Installation, Migration, Deployment and Patching
User Protection & Productivity, Endpoint Protection

Don't forget to mark your thread as 'solved' with the answer that best help

landmissle's picture

In my instution, we just stumbled on the fact that PTP is "Off" on Windows XP 64 Bit and "On" with Windows 7 64 Bit. I've read the various KB articles on the topic but they all seem to say that PTP is not fully funtional on 64 bit OSes. Yet why the diffence in status between 64 Bit Windows XP and Windows 7?

Moin_Sobhan's picture

Windows 7 Enterprise Edition - 64 Bit
PTP will show ON.

Windows XP Professional - 64 Bit
PTP will show OFF.

Let me clarify what is PTP and providing you a breakdown of PTP as below:

Polling Keylogger - Supports on Vista 64/Windows 7 64 bit, not supported in XP 64 bit
Hooking Keylogger - Supports on Vista 64/Windows 7 64 bit, not supported in XP 64 bit
Trojan Heuristics - Supports on Vista 64/Windows 7 64 bit, not supported in XP 64 bit
Commercial Application List - Supports on Vista 64/Windows 7 64 bit and XP 64 bit
Forced Detections - Supports on Vista 64/Windows 7 64 bit and XP 64 bit

So some of the PTP components does not work on XP 64 bit and that is why it will show OFF but it does not mean it is not supported as some of PTP components works. In a nut-shell XP64 supports - No COH engines, but does support CAL.

You can also check from SEPM>Admin>Server>LocalSite>Show LiveUpdate Downloads as below:

TrueScan proactive threat scan engine Win64 11.0
TrueScan proactive threat scan commercial application list Win64 11.0
TrueScan proactive threat scan whitelist Win64 11.0

Hope you find this informative.

Moin

PTP.JPG
Moin_Sobhan's picture

Breakdown of PTP as below:

Polling Keylogger - Not supported on Windows 7 64 bit and XP 64 bit but supported on Vista 64 bit
Hooking Keylogger - Not supported on Windows 7 64 and XP 64 bit but supported on Vista 64 bit
Trojan Heuristics - Supports on Vista 64/Windows 7 64 bit, not supported in XP 64 bit
Commercial Application List - Supports on Vista 64/Windows 7 64 bit and XP 64 bit
Forced Detections - Supports on Vista 64/Windows 7 64 bit and XP 64 bit

Moin