Endpoint Protection

 View Only

  • 1.  SEP to block *.exe run from pen drive

    Posted Aug 12, 2009 02:22 AM

    hi ,

    Anyone has any hints to perform this ? Or is this configurable from SEPM ?

    Thanks


  • 2.  RE: SEP to block *.exe run from pen drive

    Posted Aug 12, 2009 02:39 AM
    Follow this Doc.

    How to prevent programs from running by blocking the file extension types from removable drives.

    http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/afefa878c528d1ed882575520076cd16?OpenDocument


  • 3.  RE: SEP to block *.exe run from pen drive

    Posted Aug 12, 2009 02:41 AM
    you can exclude your pen drive folder example c:\program files\pen\v2.1\*
    you can exclude all files.
    you can do it in centralized exceptions. if you want i can explain with more details


  • 4.  RE: SEP to block *.exe run from pen drive

    Posted Aug 12, 2009 02:56 AM
    Hi Vikram,

    I refer to your posted link:

    http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/afefa878c528d1ed882575520076cd16?OpenDocument   with Note

    "All features must be installed. AntiVirus and Antispyware, Proactive Treat Protection, Network Threat Protection" .
    Is that mean I can't this option will not be available to the client installed with only AV and Spyware ??


  • 5.  RE: SEP to block *.exe run from pen drive
    Best Answer

    Posted Aug 12, 2009 03:00 AM
    Well Antivirus and Antispyware is obviously must..

    Application and Device Control is part of Proactive Threat Protection so you have to install that.

    But Application and Device Control works integrated with the Firewall Drivers.So you have to install Network Threat Protection in order to use Application and Device control feature.

    So in short you need to have all features installed on your computer in order to use Application and Device Control feature of SEP.