Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Registry key to identify SEP application suites are running

Created: 17 Sep 2009 | 4 comments
timaa's picture
2 Agree
0 Disagree
+2 2 Votes
Login to vote

I was told that currently there is not a registry key that identifies when each of the suite of SEP are running.

When using certain VPN solutions the appliances (controlling VPN) have the ability to check registry keys to ensure the clients are running the security apps. We need registries for each of the app suite to identify they are running before the VPN gets established.

Comments

Jeremy Dundon's picture
18
Sep
2009
0 Votes 0
Login to vote

You could check the MSI

You could check the MSI registry for the product code for the desired version. 

timaa's picture
18
Sep
2009
0 Votes 0
Login to vote

unfortuanately

I don't think that will tell me if the app is running. If the machine is compromised and any of the apps (AV, Firewall, SNAC.....) are disabled the version doesn't tell me that the apps were not disabled.

Jeremy Dundon's picture
18
Sep
2009
0 Votes 0
Login to vote

There is no registry key that

There is no registry key that is written to when the app is disabled.

You could check the current status of any of our services via registry, ie started, stopped etc. 

timaa's picture
18
Sep
2009
0 Votes 0
Login to vote

I didn't think that there are

I didn't think that there are different services per applicaiton in the suite. if there are can you confirm.