Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

SEP client - Fix Detection Results | Other Actions | Exclude

Created: 25 Sep 2012 | 6 comments
garylove's picture
0 Agree
0 Disagree
0 0 Votes
Login to vote

In the SEP 12.1.1101 client:

End user sees Quarantined item in the popup labled, "Symantec Endpoint Protection Results"

End user identifies software as DoD homegrown research software legitimate file and selects Other Actions | Exclude

However Exclude option is grayed out

End user requests his client group have a policy to not gray out Exclude option

SEP Administrator can find no option in the EPM console to unlock this setting

Please provide the option to lock or unlock this setting.

Comments 6 CommentsJump to latest comment

Elisha's picture

Can you attach a screenshot of the pop-up Window?

0
Login to vote
garylove's picture

I tried but this form doesn't seem to allow pasting screenshots - only cutting.  Here's how you can see it:

-  download the eicar test file or create a .txt file with only these characters:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

- When the AV acts on the test file you should have a popup labeled Symantec Endpoint Protection Results.

- highlight the risk and click on "Other Actions" button on the bottom of the popup

- It will have four actions to choose from - but the Exclude action is grayed out.

0
Login to vote
Elisha's picture

Currently the "Exclude" option under "Other Actions" is not available for viral infections.  It is available for adware and other types of detections.  This is why you cannot use it when you test with eicars.

0
Login to vote
garylove's picture

Then what I'm requesting is that the Exclude option be configurable to allow Virus false positives to be excluded by certain trusted local administrators of client systems.

0
Login to vote
Elisha's picture

Understood.  Thanks for your suggestion.  We will consider this for a future release.

0
Login to vote
garylove's picture

Thanks much for your attention. - g

0
Login to vote