Security Community Blog

Slides and Notes from the South Florida Security & Compliance User Group Meeting -1/28/10

rcarela | 01 Feb 2010 | 0 comments

The South Florida Security & Compliance User Group Board of Directors would like to thank everyone who attended the meeting at the Citrix Building on January 28, 2010. Here attached are the powerpoint presentations that took place. If anyone would like to present or host a future meeting please let us know. Please spread the word about our group! If our group continues to grow so will our experience and knowledge.

The Powerpoint presentation file

BE12_VCB is titled : Symantec Backup Exec 12.5 VMware - Virtual Consolidate Backup
SIMs is titled: Security Information Managers [SIM/SIEM]

More to come in the near future please continue to benefit from using our resources at Symantec.

Switching gears at work – Focusing on one thing

jjesse | 24 Jan 2010 | 0 comments

Last year, the company I work for was asked to be one of the partners that Symantec has that can sell and consult on professional services for Vontu. So my boss sent me to training and told me that I would be taking the lead on that product for the company. So I became team lead of no one and added yet another hat to my already busy schedule and life. Don’t take me wrong, I love my company, but I had a lot of hats I was wearing at ITS. I was Director of Training, DLP Lead, and Practice Principle for Michigan and Ohio.

Let me take a break here and describe what a Practice Principle is. ITS is run a bit like a law firm. There are partners and also a managing partner. (There is the managing Partner, my boss Wade, and several other partners who are mostly silent.) A practice principle is someone who is in charge of a practice and working...

When trying to open SEPM on Windows 2008 server, error Could not find the main class com.sygate.scm.tools.DatabaseFrame. Program

sezam | 18 Jan 2010 | 9 comments

When SEPM console is tried to be open an ERROR: "Could not find the main class com.sygate.scm.tools.DatabaseFrame. Program will exit " occurs.

The problem is UAC. To make SEPMconsole working properly You need to dissable UAC.

Windows Installer tries to install SEP continously

sezam | 14 Jan 2010 | 0 comments

Some time I face with customer which have a problem with continuous SEP installation.

This could be connected with 2 problems:

1. Domain or Local User privileges are to restricted[remember to much restrictions is also not good. You need to know how to balance with restrictions]
2. Installation is corrupted.

This problem is annoying because Windows Installer want to install SEP client continuously which can be very nervous.

Solution for this problem is to:

1. Find UninstalString value for Symantec Endpoint Protection which is situated in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

2. Paste this string to command line with changed option /I to /X ( ex. MsiExec.exe /X{68B52EFD-86CC-486E-A8D0-A3A1554CB5BC} )

Deleting Proxy settings from LiveUpdate configuration[Unmanaged Clients].

sezam | 07 Jan 2010 | 0 comments

Some days ago I faced with an issue.
In a big network all Live Update applications were configured with Proxy[Unmanaged clients]. But the proxy setting were needed to be disabled.

Network configuration is handled by files:
- Settings.LiveUpdate;

- 1.Settings.LiveUpdate;
- 2.Settings.LiveUpdate.

which are situated in C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate folder.

If You have a big environment and You need to perform disabling of proxy setting for FTP an WWW the best is create a script which will delete Settings.LiveUpdate and 1.Settings.LiveUpdate files.

I think It could be useful.

General information about using Ghost Solution Suite (GSS) with Windows 7.

Mhine | 05 Jan 2010 | 2 comments

Ghost Solution Suite 2.5, the latest version, is not currently compatible with Windows 7. Symantec is working on an update to GSS 2.5 that will allow for installation as well as the cloning of Windows 7. We will update this article when that update is available.

Although unsupported the Ghost executables from GSS 2.5 LU3 (build 2165) may clone a Windows 7 file system when used in a PreOS environment.
There are a few things to consider if you plan to test the cloning of Windows 7:

· Do NOT install Ghost Solution Suite on the Windows 7 Operating System. Install it into XP or Vista to then use the executables.

· We suggest that you use the Ghost Boot Wizard to create bootable media with the Ghost cloning Executables that can then either connect to a GhostCast Server session or clone to local hard drives

w32.downadup.B please help me

fahad_noor@hotmail.com | 01 Jan 2010 | 5 comments

please tell me prefect idea how to rid off this problem

Error: "Authentication failure" when trying to log into Symantec Endpoint Protection Manager console with an additional Admin ac

Warrior6945 | 24 Dec 2009 | 1 comment

Error: "Authentication failure" when trying to log into Symantec Endpoint Protection Manager console with an additional Admin account

When you login to the Symantec Endpoint Protection Manager console using the Default Administrator you can login successfully However if you create a new Admin and try to login you get an error "Authentication failure"
Reseting the password for the additional Admin account also does not help.

In the SEPM Console go to the Admin tab

Select Domains

Check if more than one Domain is present, if Yes then add the admin account to all the Domains

Also while logging in to SEPM, you may select the correct Domain by clicking on the button "Options"

You should be able to login successfully.

Get all List of all Archives

Wayne Humphrey | 08 Dec 2009 | 1 comment

This SQL Script will get all List of all Archives and dispaly the following:

Mailbox Name
Exchange Server
Number of Items (Mailbox)
Number of (Archive)
Mailbox Size (MB)
Archive Size (MB)
Total Size (MB)
Archive Created
Archive Updated

SELECT 
LEFT(MbxDisplayName,20) AS 'Mailbox', 
ExchangeComputer AS 'Exchange Server',
MbxItemCount AS '#Items (Mailbox)', 
VS1.ArchivedItems AS '#Items (Archive)',
MbxSize/1024 AS 'Mbx Size (MB)', 
VS1.ArchivedItemsSize/1024 AS  'Archive Size(MB)',
(mbxsize+VS1.ArchivedItemsSize)/1024 AS 'Total Size(MB)', 
VS1.CreatedDate AS 'Archive Created',
VS1.ModifiedDate AS 'Archive Updated', 
MbxExchangeState AS 'Exchange State'
 
FROM
EnterpriseVaultDirectory.dbo.ExchangeMailboxEntry AS EME,
EnterpriseVaultDirectory.dbo.ExchangeServerEntry AS ESE,...

Scan Engine: How to configure resource parameters correctly

DominikG | 08 Dec 2009 | 4 comments

I am receiving many support requests related to scan errors of the scan engine, which are caused by a suboptimal usage of the system resources, or because someone simply did not configure the parameters in the right way.
The scan engine is not software that can be set up and is good to go. In each environment, there has to be done some tuning to avoid errors and/or performance issues.

For that reason I talked to Symantec’s tech support to get a little help on how to configure the resource parameters correctly.

So if you are experiencing scan errors in a large amount or get reports of bad performance, please check the following steps:

1. Open the scan engine interface and go to “reports” -> “resources”

2. Note the value of “thread pool size”

3. Note the value of “Load statistics” -> “queued...

Security Community Blog

Links

About Security Community Blog

Filter by:

Blog Tags