Endpoint Protection

 View Only

  • 1.  SEP 11 - Application causes Tamper Protection Alert

    Posted Sep 16, 2009 01:17 AM
    Since installing SEP11 (unmanaged 11.0.4000.2295) I have had Tamper Protection Alerts while attempting to run the application (game) Battlefield 2.  Bellow are examples of the alert:

    ***
    SYMANTEC TAMPER PROTECTION ALERT
    Target:  C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    Event Info:  Set Information Process
    Action Taken:  Logged
    Actor Process:  C:\Program Files\EA GAMES\Battlefield 2\BF2.exe (PID 2712)
    Time:  September 16, 2009  12:41:23 AM

    SYMANTEC TAMPER PROTECTION ALERT
    Target:  C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe
    Event Info:  Set Information Process
    Action Taken:  Logged
    Actor Process:  C:\Program Files\EA GAMES\Battlefield 2\BF2.exe (PID 2712)
    Time:  September 16, 2009  12:41:23 AM
    ***

    Under Network Threat Protection I have "allowed" the BF2.exe as shown bellow, but the warnings still appear:

    BF2.JPG
    I have seen reference to the same error in other Norton/Symantec products such as: http://community.norton.com/norton/board/message?board.id=nis_feedback&thread.id=33630

    Does anyone have some insight into how to fix this issue?   Thank you for your help.



  • 2.  RE: SEP 11 - Application causes Tamper Protection Alert

    Posted Sep 16, 2009 01:33 AM
    Did you add a Centralized exception for tamper protection with the complete path of the exe being blocked?
    You can do it by following the instructions below:


    Policies-> Centralized Exception -> Add Centralized Exception Policy- > Centralized Exceptions-> Add-> Tamper protection Exception

    Make sure that the client mahcine has received the policy before you test the Game again.

    Best,
    Aniket



  • 3.  RE: SEP 11 - Application causes Tamper Protection Alert

    Posted Sep 16, 2009 02:15 AM
    You can add Centralized exception in client...

    Open SEP
    Select Cange settings
    click on Configure settings for "Centralized exception"
    Click on Add--->Security risk exception--->File
    Browse the file BF2.exe and Click on Add.


     


  • 4.  RE: SEP 11 - Application causes Tamper Protection Alert

    Posted Sep 16, 2009 02:20 AM
    You can even select a folder which contains your program so that all support files will also open with the program.


  • 5.  RE: SEP 11 - Application causes Tamper Protection Alert

    Posted Sep 16, 2009 02:57 AM
     I will give this a shot.  I will report back if it fixes the issue.  Thanks.


  • 6.  RE: SEP 11 - Application causes Tamper Protection Alert

    Posted Sep 16, 2009 03:08 AM
    I noticed that you are using the base release of SEP 11.  I think you should upgrade the latest release which is MR4 MP2 (build 4202).  There are quite a bit of problems with the base release.


  • 7.  RE: SEP 11 - Application causes Tamper Protection Alert
    Best Answer

    Posted Sep 16, 2009 07:52 AM
    You cannot add any tamper protection exception you will have to turn off Tamper Protection.
    As you have Unmanaged Client.Only Managed Clients can have TP exceptions.


  • 8.  RE: SEP 11 - Application causes Tamper Protection Alert

    Posted Sep 16, 2009 08:44 AM

    You cannot add any tamper protection exception you will have to turn off Tamper Protection.
    As you have Unmanaged Client.Only Managed Clients can have TP exceptions.

    As u are using unmanaged client , U can remove the Network Threat protection component from you PC. 

    Regards...
    Ramji Iyyer