Video Screencast Help

Adopting SANS 20 Critical Controls - enhanced features needed

Created: 01 Jul 2013 | 1 comment
EIG-AV's picture
0 Agree
0 Disagree
0 0 Votes
Login to vote

As more organizations are adopting the Security Controls as outlined by SANS - 20 Critical Controls for effective Cyber Defense, will Symantec Endpoint Protection build more features to support these different controls?  See this url:  http://www.sans.org/critical-security-controls/guidelines.php

For example, as part of SANS 20 Critical Controls #5 Malware Defense, "Configure systems so that they conduct an automated anti-malware scan of removable media when it is inserted".  I don't see this option anywhere in the SEP Managment console, v12.1.3 - if this option is currently available, please let me know how to do it.  

If not, please build Symantec Endpoint Protection to have options around removable media within the Protection Technology, in the Virus & Spyware Protection Policy. Currently, SEP has MAC settings, there are a number of options around Mounted disks.  Can't options like this be developed on the Windows settings side? 

Update/remove the "floppy Settings" features.  My last 2 computers don't even come with floppy drives, and CD drives are now optional/add-on.  SEP should now be protecting and scanning from malware on current technology threats such as MP3 players, iPhones, USB, cameras, and other devices.

 

Thanks,

Cheryl

 

 

 

Comments 1 CommentJump to latest comment

_Brian's picture

SEP does not automtically scan a USB drive when it is inserted. KBA link below for reference:

Does Symantec Endpoint Protection or Symantec Antivirus Scan USB flash drives?

http://www.symantec.com/docs/TECH102573

Currently, when an infected USB drive is inserted, auto-protect would scan and take action on the malicious process if it tries to do anything.

MP3 players, iPhones, cameras, and other devices would all fall under the above scenario (removable devices).

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

0
Login to vote