Endpoint Protection

Hi,

Just wondering...Is there a sort of email notification of latest threats etc that can be configured? Similar to McAfee SNS, whereby if a threat is found in the wild and is deemed dangerous enough, then a notification is sent to those registered users informing them? This would be through Symantec, not SEPM.

McAfee notifications are similar to below:

Subject: *URGENT* McAfee SNS ALERT: Emergency DAT Release for File Infector
 

McAfee is aware of a particularly malicious file infector that blue-screens endpoints and is difficult to detect. While this malware seems to be a targeted attack, McAfee strongly recommends that all customers increase their protection by applying the Emergency DAT Release which includes a generic detection for the dropper which starts the infection.

McAfee has provided an extra.DAT and Stinger ZIP files for W32/DistTrack for detection and removal. See McAfee KnowledgeBase article KB75963 (https://kc.mcafee.com/corporate/index?page=content&id=KB75963).

McAfee Global Threat Intelligence (GTI) will detect the known W32/DistTrack droppers when set to 'Medium'. See “How to enable Global Threat Intelligence Technology in your McAfee product (KB70130)” (https://kc.mcafee.com/corporate/index?page=content&id=KB70130).

NOTE: The following McAfee products currently employ McAfee DAT files:
 
AntiSpyware Enterprise
Anti-Virus Scanning Engine
Email and Web Security Appliance Software
GroupShield for Exchange
LinuxShield
PortalShield
SaaS Endpoint Protection
Security for Lotus Domino
Security for Mac
Security Service for Exchange
Security for SharePoint
SuperDAT Manager
VirusScan Command Line Scanner
VirusScan Enterprise
VirusScan Enterprise for Linux
VirusScan Enterprise for Offline Virtual Images
VirusScan Enterprise for SAP
VirusScan for Mac
VirusScan for UNIX

So just wondering if there is something similar that is available via Symantec?

Hello,

No Emails which could be configured for Threat / Risk updates on Symantec.

However, you could be Informed about IT Threats 24/7 REPORTING, check these - 

Good idea i think, can be helpful.

"Thumbs up" to Mithun's suggestion.   I have subscriptions set up to be notified of all new blog posts by "Symantec Security Response" and several authors who contribute to that blog.  That, and other news  sources freely available on the Internet, provide a good coverage of new security-related developments.

Hope this helps!

Symantec offers a service to do this:

Symantec DeepSight Alert Services

https://alerts.symantec.com/

You will need a paid subscription to use it but very helpful and can configure all kinds of alerts. This is what you're looking for.

Hi Brian,

What subscription is required? Is it for SEP or actually a seperate subscription to the Deepsight Alerts?

Thanks

It's a separate subscription.