Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Registry or Command? of Network threat protection

Updated: 21 May 2010 | 5 comments
vee_zza's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

Hi all

Now i want to create HI policy for check IPS feature on clients who come back to our office. Everyone should have IPS or Network threat is running.

So, i need to know the Network threat protection or IPS key registry to create the HI rule for check all clients.
Or some command for start Network threat protection or IPS feature.

Have anyone can share the How-to? Thank you so much.

Comments

Vikram Kumar-SAV to SEP's picture
16
Aug
2009
2 Votes +2
Login to vote

In the registry check the

In the registry check the value HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\smc_engine_status 

If the vlaue of  smc_engine_status  is "0" that means NTP is Disabled
If the vlaue of  smc_engine_status  is "1" that means NTP is Enabled

When manually viewing it
Browse till SMC --highlight SMC the look at the value on the right hand side.

vee_zza's picture
17
Aug
2009
0 Votes 0
Login to vote

Hi Vikram

Hi Vikram Thank a lot for your answer

i have more question, after check the HI policy change back the value "smc_engine_status" to 1 for enabled
The registry key had after HI done.

But on the client interface, the NTP disabled icon is still showing.

So, im not sure that NTP is re-enable on client or not? Could you try change the value 0 to 1 and 1 to 0 for see the result?

Aniket Amdekar's picture
17
Aug
2009
1 Vote +1
Login to vote

Hi, NTP requires a reboot to

Hi,

NTP requires a reboot to be enabled and activated. Please perform a reboot after you change the registry value to 1.

@ Vikram: Excellent info mate!!  Loooking forward for more tewaks and tricks from end!!

cheers,
Aniket

vee_zza's picture
17
Aug
2009
0 Votes 0
Login to vote

Thank you for both answers. ^

Thank you for both answers. ^ ^
@ Vikram
@ Aniket

vee_zza's picture
17
Aug
2009
0 Votes 0
Login to vote

More question

i've more question again.

if i need to check "Enable Intrusion prevention" setting in NTP. because some client: NTP is enable but IPS is disable. and i want to run IPS all client.

How can HI check this?
Have any registry key for this setting?