Endpoint Protection

Hi,

I have followed to add firewall policy to SEPM 

http://www.lansweeper.com/kb/203/configuring-symantec-endpoint-protection-for-use-with-lansweeper.html

But I found some PC still display traffic block alert.

Checked those firewall policies were applied to all SEP gorups

• Why not all PC have this issue ? Some PC the traffic is "Allowed" from Lansweeper
• Add upper firewall policy but still blocked ? Please advice.

Thanks !

Hi,

Otherwise, refer to attached file "Clipboard01.jpg".

I haven't check the box "Automatically block....." but why still blocked ?

Please advice.

Thanks !

When you created this firewall policy, did you enable the logging? If not, enable it and see if the IP matches or not. There might be more details on it.

Also are you using 'push' or 'pull' for policy? Some clients may not have the latest policy from SEPM.

Checked logging was enabled.

And how to check push or pull ?
 

Thanks

To check the Pull/Push policy, on SEPM go to Clients -> pick a group -> click on Policies tab -> Communications Settings.

From there, you can see if this specific group is Push or Pull. I use Pull to reduce network load and the client will request for the latest policy upon power on within 5 minutes of heartbeat.

I notice from the screenshot you posted, you didn't have "Any" for the "Host" for Lansweeper. The guide suggests to use 'Any', unless you picked a specific one for a reason?

I notice from the screenshot you posted, you didn't have "Any" for the "Host" for Lansweeper. The guide suggests to use 'Any', unless you picked a specific one for a reason?

>> Can't specific Lansweeper server ?

>> If any, then all host can do anything

Thanks

It can be either. Reason I ask was that I was going to suggest changing it to 'Any' and see if it resolves the issue. If yes, then the issue is the firewall somewhere. However if not, then it's something else. A good way to troubleshoot this.