Tamper Protection Annoyance
Updated: 23 May 2010 | 3 comments
I am running SAV 10.1 on my servers & have recently begun installing Prism Microsystem's EventTracker agent, which as you can guess by the name, is an Event Log management solution.
Once the agent is installed on a server, I start getting a plethora of Symantec Tamper Protection Alerts. I've gone to the knowledge base here & can see it's probably because Prism is attaching to the Event log API - but
short of turning off Tamper Protection how do I get these alerts to stop?
Is there a process exception list for tamper protection where I can tell it not to bother if it's a certain process?
discussion Filed Under:
Comments
Message Edited by SecurityGuy on 07-19-200710:21 AM
Hi Chap,
Turning off tamper protection is simple.
Unlock your server group in the Symantec System Centre
Right click your Primary Parent Server
Navigate to All Tasks > Symantec AntiVirus > Client Tamper Protection Options.
You can then de-select the options as required to disable this feature.
Hope this helps,
Regards,
Chris
Would you like to reply?
Login or Register to post your comment.