Endpoint Protection

Can you please look at the screen shot and tell me why this is so?

If I do an update will the AV and AS be enabled but Auto-Protect stay disabled?

I created this using the non-shared policies and applied it to my group to ensure Auto-Protect is DIASBLED and stays disabled.

I could not find the resigtry setting for disabling it in my installation which I thought was weird.

Thanks

Attachment(s)

SEP disabled.docx   104 KB 1 version

what is the version of SEP?

dod you manually tried to start the SEP service , did it throw any error?

any information in the Application event viewer?

Make sure that you have the latest version installed, 11.0.6100.XXXX

You need to click on the Lock button ( the small one u find in the AV policy)

once done u should be fine.

1. Open the Symantec Endpoint Protection Manager.
2. Click Clients.
3. Select the group that contains the clients you want to be affected.
4. Click Policies.
5. Expand Location-specific Policies
6. Click Antivirus and Antispyware policy.
7. Click File System Auto-Protect, then lock this feature by clicking the lock symbol next to Enable File System Auto-Protect( You want to disable it right, just disable and lock it)

agree to Rafeeq's comment, however check manually starting Symantec Endpoint Protection service

If non of the above suggestions works

Try by restarting your PC once.

If not helps clear the virus defs

How to clear out corrupted definitions for a Symantec Endpoint Protection Client

If above suggestions not helps clear the virus defs from your PC and update using intelligent updater and see

Have you checked the Email Protection component?

When "Email Protection" is disabled in the Symantec Endpoint Protection Manager (SEPM) policy and it is Enabled in the Symantec Endpoint Protection client user interface, you may see this type of error message.

If it is disabled in the SEPM Policy, remove Email Protection from SEP Client or Enable it on both sides.

Also make sure the definitions are updated

The clients this SEP install is being created for are Audio Visual computers. The systems must have Auto-protect diasbled and not turning on by default after a period of time.

All are running Win XPSP3 x64bit clients.

Liveupdate should run on schedule to update definitions @ 4.00am on Mondays,

TruScan ProActive Threat Scan must be enabled

Scheduled scan of only D drive.

Is this possible to do all of the above using policies?

Any help would be appreciated.

<<<The systems must have Auto-protect diasbled and not turning on by default after a period of time.>>>

---It is possible in AV /AS policy uncheck file system autoprotect and clock the small lock symbol by clicking on it..It is not a recommended setting anyway.Do you have any particular reason for doing this?

<<Liveupdate should run on schedule to update definitions @ 4.00am on Mondays>>>

---It is possible if your liveupdate source is Internet or Internal LU server.(LU policy )

<<TruScan ProActive Threat Scan must be enabled>>>

---For this these features should be installed in the client 

<<<Scheduled scan of only D drive.>>>

___It is possible if you are scheduling the scan in the client.Form SEPM through policies it is not possible.

yes you can disable the autoprotect.

in the policy uncheck the AP and close the lock

to test it what you can do is to download the eicars test virus file

http://www.eicar.org/anti_virus_test_file.htm

if ap is disabled ; it wont be detected by sep.

if its enabled you wil get a pop up saying ap found the virus and deleted it.

I tested it and its working as expected :) please update us