Endpoint Protection

 View Only
  • 1.  SEP Client Noticifation switches?

    Posted Mar 06, 2009 04:31 PM

    We have a few cleints that have a ports open on the firewall.  I would like to keep the logs but turn off the notications so it stops interfering with my users?  How can I do this on the Management server?

    We have Symantec_Endpoint_Protection_11.0.4000_MR4 installed.

    Windows XP cleints.



  • 2.  RE: SEP Client Noticifation switches?

    Posted Mar 06, 2009 06:04 PM

    Which notifications do you mean? 



  • 3.  RE: SEP Client Noticifation switches?

    Posted Mar 06, 2009 06:26 PM

    The pop-ups on the client machine.

    That say "Traffic from IP address xx.xx.xxx.xx is blocked from 2/25/2009 11:00:00 to xxxxx.  SID: 23179 MSRPC Server Service BO detected.

     

    I'm getting alot of complaints from our users not wanting to see these messages.

     

    Where in the Manager console can I set the policies to surpress these pop-ups.



  • 4.  RE: SEP Client Noticifation switches?

    Posted Mar 06, 2009 06:29 PM

    Thats an IPS notification... its normally for a reason, particularly now we have our new more granular IPS engine in SEP.

    Have you confirmed that the IP address in question is clean by running a scan against the machine, or is it a machine not on your network?

    If you want to disable this notification, you can do it on the management server console:

    Click Clients, Expand Location Specific Settings, Click Client User Interface Control Settings, Click Customize, choose your options in Intrusion Prevention Notifications