Endpoint Protection

 View Only
  • 1.  System lockdown - file fingerprints

    Posted Nov 10, 2010 10:28 AM

    Hi all.

    I'm playing with System lockdown and have set the testing mode on a small test group. Seems to be collecting information nicely as in 5 hours it's collected 10,103 exceptions.

     

    my problem is when I click 'Add; under the file fingerprints list section it claims there's none to add......what gives?

     

    thanks.



  • 2.  RE: System lockdown - file fingerprints

    Posted Nov 10, 2010 11:19 AM

    You need to select and then click on ADD



  • 3.  RE: System lockdown - file fingerprints

    Posted Nov 10, 2010 11:40 AM

    the file fingerprint list is blank, i click 'Add' hoping that it will prompt which ones to add - but nothing......



  • 4.  RE: System lockdown - file fingerprints
    Best Answer

    Posted Nov 10, 2010 12:01 PM

    Check if this article helps

    https://www-secure.symantec.com/connect/articles/what-system-lockdown-what-stages-do-i-implement-system-lockdown-symantec-endpoint-protectio



  • 5.  RE: System lockdown - file fingerprints

    Broadcom Employee
    Posted Nov 10, 2010 01:04 PM

    The answer is there in the article that Vikram has linked.

    What it looks like you have missed outrunred is that you need to add a File Fingerprint list first.  You can do this by going to Policies -> Expand Policy Components -> File Fingerprint Lists.  Here is where you actually add the file fingerprints themself to create a list.  Then back in the System Lockdown you can add the List that you have pre-configured.



  • 6.  RE: System lockdown - file fingerprints

    Posted Nov 11, 2010 05:16 AM

    great thanks........I think i see what the problem is.

     

    my word, what an overly complex way to whitelist applications. So i need to create a file fingerprint file first using the document Vikram linked to.....

     

    I mean, so there's no purpose in 'view unapproved applications' button on the system lockdown section..... it's like saying, here's a piece cake, you like it don't you?....but you can't have it, you've got to go and sodding bake it yourself!

     

    But that's not your fault. How i can I split the solution on this as you both helped equally?



  • 7.  RE: System lockdown - file fingerprints

    Posted Nov 11, 2010 06:32 AM

    Its the Article will give you in depth Idea about how to use it and how it works :)



  • 8.  RE: System lockdown - file fingerprints

    Posted Nov 11, 2010 06:46 AM

    yeah I think I've gotten it all working nicely - but these things should be intuitive, there's nothing complex about what it's doing, I should be able to do it all from SEPM.

     

    The clunkiness just annoys me sometimes.

     

    But again, thanks for helping.

     

    :-)