Endpoint Protection

 View Only

  • 1.  what should be blocked for user who are working as mobile user,

    Posted Jul 10, 2013 01:44 AM

    i am planning to use location awarness feature.but i am confused that what should i blocked for user when they are on remote location or wroking from home

    i can do about webfiltring but what are other service that should be blocked when the user is not in my corporate network

     

    Regards

    Rohit



  • 2.  RE: what should be blocked for user who are working as mobile user,

    Broadcom Employee
    Posted Jul 10, 2013 01:52 AM

    the remote user have a difficulty of updating the definition if off from corporate network, you may thnk of enabling LU once move out of network.

    How to configure mobile computers to automatically download virus definitions when disconnected from the SEPM

    http://www.symantec.com/business/support/index?page=content&id=TECH104571&locale=en_US

    restricting user limits on configuration can be achieved using location awareness and it has to be decided by you.

     



  • 3.  RE: what should be blocked for user who are working as mobile user,

    Posted Jul 10, 2013 01:56 AM

    what about other services !



  • 4.  RE: what should be blocked for user who are working as mobile user,

    Broadcom Employee
    Posted Jul 10, 2013 01:59 AM

    you can configure firewall rules based on location. similarly ADC policy as well.



  • 5.  RE: what should be blocked for user who are working as mobile user,

    Posted Jul 10, 2013 02:03 AM

    well i am confused what should i blocked,like what are best prastice



  • 6.  RE: what should be blocked for user who are working as mobile user,

    Broadcom Employee
    Posted Jul 10, 2013 02:11 AM

    its your requirement, i haven't seen any rticle mentioning the blocking.



  • 7.  RE: what should be blocked for user who are working as mobile user,
    Best Answer

    Posted Jul 10, 2013 06:22 AM

    Ideally, you want to block everything and only allow what is needed.

    It may depend on what your company policy allows but I would start by allowing 80, 443, and VPN while blocking everything else.

    What else do they need while working from home? Only you or they could answer that. There is no specific best practice for this since each company is different.



  • 8.  RE: what should be blocked for user who are working as mobile user,

    Posted Jul 10, 2013 07:24 AM

    With the help of Location awareness policy, you can enable live update option for download definition from symantec site. Also you can block below rule

    1) Restrict for file or regestry modification access.

    2) Block host file modification.

    3) Block download file from internet.