Endpoint Protection

Hi,

I am evaluting symantec endpoint production 11.0.6 version. I have installed server and client. But in my client one alert pop up message coming often.

Like

Traffic from IP address 10.10.1.2 is blocked.

(SID : 23179) MSRPC server service BO detected.

How can i avoid without displaying this  pop up windows. because its appear every five mins. I have tried so many setting but not worked.

Please help to shortout my problem.

Thanks in advance,
Mahendran M

You can  turn these notifications off so users don't see them. Go to Clients ---> Policies tab ---> click the "+" next to Location-specific Settings to expand and select Tasks ---> Edit Settings ---> select Customize for whatever control you have it set to and uncheck Display Intrusion Prevention notifications

Thats an IPS notification... its normally for a reason, particularly now we have our new more granular IPS engine in SEP.

Have you confirmed that the IP address in question is clean by running a scan against the machine, or is it a machine not on your network?

If you want to disable this notification, you can do it on the management server console:

Click Clients, Expand Location Specific Settings, Click Client User Interface Control Settings, Click Customize, choose your options in Intrusion Prevention Notifications

How to Disable Client Intrusion Prevention Notifications in Symantec Endpoint Protection Manager (SEPM)