Video Screencast Help
Search Video Help Close Back
to help

Security Community Blog

Showing posts tagged with 12.x
Showing posts in English
GrahamA | 18 Jan 2012 | 0 comments

Happy new year to you all!

The Symantec LUA team released version 2.3.1 in Dec. Just a quick status update for you in relation to how things have been going since then.

We've seen over 200 successful customer installs/upgrades of LUA 2.3.1 so far and feedback has been very positive.

As a recap, 2.3.1 introduced the following enhancements:

  • The LUA web server service will now automatically restart if it crashes or terminates unexpectedly.
  • LUA will now automatically install and utilise an optimised private Java Runtime Environment (version 1.6 update 27). This also means it is no longer necessary to separately install a public JRE for use by LUA.
  • It is now possible for LUA to automatically run multiple specified distribution tasks after a download task completes.
  • New quick link added to the user interface which allows customers to quickly and easily capture all LUA-related troubleshooting...
Srikanth_Subra | 09 Jan 2012 | 5 comments

Symantec is investigating claims by a group of hackers that they are in possession of source code for its Norton AntiVirus (NAV) product.

The group, which uses the name "The Lords of Dharmaraja," claims to have stolen Symantec source code and documentation from the servers of Indian intelligence agencies, along with intellectual property from other software companies that have contracts with the Indian government.

"As of now we start sharing with all our brothers and followers information from the Indian Military Intelligence servers," the group said in a Pastebin post on Wednesday. "So far we have discovered within the Indian Spy Programme source codes of a dozen software companies which have signed agreements with Indian TANCS programme and CBI."

The original post has been deleted from Pastebin but was still available in Google's cache. It contains...

mon_raralio | 27 Dec 2011 | 0 comments

Just testing out a centralized exceptions and used Angry IP Scan ver 2.21. Because I know it gets detected. Using SEPM (ver 12.1.671.4971), I created a policy for the file ipscan.exe which is the name of the executable I downloaded and set it to Ignore and when finished shows as Log only. Assigned it to a test group. Forced update all the clients and when all serials are synced started testing.

I tried it out on 2 clients (vers 12.1.671.4971 and 11.0.6300.803). Both times, the test executable was quarantined.

2nd test was, I went to the client (the 11.xx) and opened the quarantine. Selected the ipscan.exe , clicked on Restore , answered Yes on "...sure? , ...create Exclusion...?

After that, I was able to use AngryIPScanner.

Note: There is also an entry for that.

1. Exceptions > Add > Windows Exceptions > Known Risks

2. Find 'AngryIPScanner' and put a check on it. Click Ok...

rscovel | 19 Dec 2011 | 4 comments

Symantec Protection Center 2.1 (SPC) has been released!

The Symantec Protection Center Team is proud to announce the release of Symantec Protection Center 2.1 (2.1.0.2075), which was published today to the LiveUpdate Publishing Service.  SPC 2.0 Customers will be notified that an update to SPC is available for download.  This is a LiveUpdate release only.  This update provides fixes for a small number of defects, as well as several major enhancements.

These enhancements include:

  • New Security Audit functionality, and reports
  • New Intrusion Detection System (IDS) signature reports
  • An enhanced Specific Endpoint report
  • SPC Web Interface security certificate management
  • Updated browser compatibility

Full details are found in the SPC 2.1 Release notes (DOC4967...

SolarisMaestro | 17 Nov 2011 | 6 comments

SEP 12.1 RU1 is now available on FileConnect. You will need to use your SEP 12.1 M# (serial) to login to Fileconnect and access the latest release.

There have been a few changes, such as the inclusion of the Symantec Installation Manager (Altiris platform) that provides access to IT Analytics. SPC 2.0 is the same as before. There is also the inclusion of a separate Mac client. The "Full" download from before was also a bit confusing so it has been renamed to Part1_Installation_EN. You will want to download both Part 1 and 2 so you have all the bits you need.

Last but not least, the SEP Recovery Tool 2.0.24 has been added for easy access.

Release Notes for Symantec™ Endpoint Protection, Symantec Endpoint Protection Small Business Edition, and Symantec Network Access Control, version 12.1 Release Update 1
http://www.symantec.com/docs/DOC4889

...

shahram.dehghani | 26 Oct 2011 | 0 comments

Hi

I was using SEPM and NAC MR6MP3.

I decided to upgrade to version 12!!!

after upgrading SEPM and NAC to version 12 and assigning packages to the groups, I checked some clients,All SEP features like Antivirus,Sonar and NTP was running but Network Access Control (NAC) feature was not available and running on them.

I checked some documents about SEP 12 and it is a known issue in SEP 12 and unfortunately for me in NAC!

http://www.symantec.com/business/support/index?pag...

The issue occurs under the following conditions in upgrade process.

1.  You have an 11.x SEPM with packages assigned to the groups.  

2.  The packages have "Maintain existing client features when updating" unchecked

The solutions in this article...

rscovel | 25 Oct 2011 | 0 comments

The Protection Center Team is proud to announce the release of Symantec Protection Center 2.0 Release Update 1 (SPC RU1), which was published today to the LiveUpdate Publishing Service.  SPC 2.0 Customers will be notified that an update to SPC is available for download.  This is a LiveUpdate release only.  This update provides fixes for a small number of defects and also the ability for SPC customers with Symantec Web Gateway (SWG) 5.0.2 (and later) and Symantec Critical Systems Protection (CSP) 5.2.8 (and later) applications to integrate with the SPC Dashboard. 

Symantec Protection Center is a centralized security management console that enables organizations to identify emerging threats, prioritize tasks and accelerate time to protection based on relevant, actionable intelligence. Through a combination of process automation and security intelligence, it enables users to take timely, targeted action to remediate incidents and proactively...

Pamela Reese | 22 Sep 2011 | 0 comments

InformationWeek recently published its 23rdannual InformationWeek 500 list where Symantec ranked #168.  The InformationWeek 500 is an annual listing of the most innovative users of business technology in the U.S.

InformationWeekidentifies and honors the nation's most innovative users of information technology with its annual 500 listing and also tracks the technology, strategies, investments and administrative practices of America’s best-known companies.  The InformationWeek 500 rankings are unique among corporate rankings as it spotlights the power of innovation in information technology, rather than simply identifying the biggest IT spenders. 

Symantec is keeping good company on the list this year ranking ahead of companies like Microsoft (#241), HP (#222) and Salesforce.com (#171). Companies like EMC, McAfee, NetApp and VMware were on the list as well but...

pannawich pornwattana | 01 Sep 2011 | 0 comments

ปัญหานี้จะเกิดเมื่อ ลงตัว sep12.1 แล้วต้องการจะ activate license ครับ

 

วิธีแก้ไข ให้่เชคดังนี้ครับ เข้าไปที่ control panel > regional and laguage > เปลีย่นทุกอันที่เป็นภาษาไทย ให้เป็น english ครับ (ได้หมดไม่ว่าจะเป็น USA,England)

 

> แล้ว restart 1รอบ ครับ > ลอง activate อีกรอบครับ 

 

ถ้าต้องการที่จะใช้เป้นภาษาไทยให้เปลีย่นหลังจากที่ activate เสร็จแล้วครับ

 

pannawich pornwattana | 01 Sep 2011 | 0 comments

ปัญหาที่มักจะพบใน sepm คือ "ทำไม Client บางเครื่องอัพเดท แล้วทำไมบางเครื่องไม่อัพเดท"

ให้ทำดังนี้ครับ check ที่เครื่อง manager ก่อน ว่า definition ที่เครื่อง manager มีเป็นเวอร์ชั่นล่าสุดรึเปล่า  ถ้าไม่ ก็ไปที่ แถบ admin เลือก server > local server > live update

แล้วลองกด อัพเดท content ดูครับ

 

ถ้ากด live update ที่ตัว manager แล้วมี show ว่า error return code 4  ให้ check ก่อนว่าเครื่องเซิฟเวอร์ต่อกับ internet ได้ไหม ปกติเวลาขึ้น return code =4 คือไม่สามารถเชื่อมต่อ กับ internet ได้

 

ถ้าทำการอัพเดทเครื่อง manager เป็น definition ล่าสุดแล้ว กด update content ได้เลยครับ เพื่อกระจาย def ใหม่ ให้เครื่องที่ยังไม่ได้อัพเดท

 

ส่วนเครื่องที่อัพ เดทก่อน manager ถามว่าทำไมมันถึงอัพเดท ลองเข้าไปเชค policy ของ life update ก่อนครับว่า ติีก อนุญาติ ให้เครื่อง client อัพเดทผ่านเน็ตได้หรือป่าวครับเพราะว่าถ้า ติ๊กเอาไว้แล้วเซิฟเวอร์ไม่อัพเดท เครื่อง client จะไปเอา definition ที่เซิฟเวอร์ของ symantec...