Endpoint Protection

Hi All,

What is sonar?

hi,

check this thread and sumit g comments

https://www-secure.symantec.com/connect/forums/what-sonar#comment-8287441

About SONAR

Re-Edit
Managing SONAR

Configuring TruScan proactive threat scan settings for legacy clients

About adjusting TruScan settings for legacy clients

Find the attach thread for your knowledge

https://www-secure.symantec.com/connect/forums/sep-121-sonar-definitions

https://www-secure.symantec.com/connect/forums/manually-update-sonar-definitions

https://www-secure.symantec.com/connect/forums/where-are-truscan-logs-sepm-12

It does behavioural analysis on the file as opposed to signature based. It protects against zero-day threats.

Hello,

SONAR is a real-time protection that detects potentially malicious applications when they run on your computers. SONAR provides "zero-day" protection because it detects threats before traditional virus and spyware detection definitions have been created to address the threats.

SONAR uses heuristics as well as reputation data to detect emerging and unknown threats. SONAR provides an additional level of protection on your client computers and complements your existing Virus and Spyware Protection, intrusion prevention, and firewall protection.

SONAR uses a heuristics system that leverages Symantec's online intelligence network with proactive local monitoring on your client computers to detect emerging threats. SONAR also detects changes or behavior on your client computers that you should monitor.

Reference: http://www.symantec.com/docs/HOWTO81392

Check these Articles:

About SONAR

http://www.symantec.com/business/support/index?pag...

Managing SONAR

http://www.symantec.com/business/support/index?pag...

Adjusting SONAR settings on your client computers

http://www.symantec.com/docs/HOWTO55258

Handling and preventing SONAR false positive detections

http://www.symantec.com/docs/HOWTO55273

Hope that helps!!