Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.
Security Community Blog
Showing posts in English
jjesse | 25 Nov 2009 | 0 comments

The recession is creating camaraderie amongst workforces, at the expense of their employers, is the finding of a transatlantic survey. Carried out amongst 600 office workers in Canary Wharf London and Wall Street New York, 41% of workers have already taken sensitive data with them to their new position, whilst a third would pass on company information if it proved useful in getting friends or family a job.

From an article on a security website, it states more and more employees are stealing data when they leave their current employer; A couple of interesting stats from the article.

  85% of people admit they know it’s illegal to download corporate data.

  57% of people say it is easier to take sensitive data this year, up 29% from last year

  Top of the list is customer and...

snekul | 24 Nov 2009 | 1 comment

First, some background. We were setting up a new box running Server 2008 R2 Core on x64.  In my department, we push out SEP to all our servers via Group Policy.  On this new Server 2008 R2 Core on x64 box the install of SEP failed.  We were puzzled until we ran into another application (in this case VMware Tools) that did not install properly either.  We discovered that Server 2008 R2 Core does not have an "Installer" folder inside the Windows folder--this would usually be C:\Windows\Installer.  Upon creating the folder, VMware Tools installed fine and on a reboot, SEP installed just fine as well.

Also, we were pushing out RU5, as that is necessary for full support on Server 2008 R2.

So, if you run into trouble installing SEP (or anything else for that matter) on Server 2008 R2 Core, make sure you have an "Installer" directory in your Windows folder.

DominikG | 20 Nov 2009 | 0 comments
I recognized something strange, which has been quite confusing for some of our customers. Actually the current version von Endpoint Protection (11 RU5) is published with two different version numbers. The packages, you receive through LiveUpdate are listed as 11.0.5002.0 in the Endpoint Protection Manager, but packages you create from other sources, e.g. downloads from Symantec’s fileconnect , are listed as 11.0.5002.333.
 
This fact makes it possible to import both versions into the Manager, if you received the packages through LiveUpdate onto your MR4 system and then upgrade it to RU5. After that you will see that four packages with the mentioned two different version numbers get listed under “install packages”.
Now, if you install the package with number 11.0.5002.0 onto a client, it gets actually also listed as installed version 11.0.5002.333. So the whole issue is just wrong information in the Manager, which the software cannot...
MarissaVicario | 17 Nov 2009 | 0 comments

Posted on behalf of Paul Wood

This week I had the pleasure of sitting on a panel with some of the best and the brightest among my Symantec colleagues to reflect on 2009’s threat landscape and what we anticipate for the year ahead.

We concur that what we’ve seen this year was ugly. Botnets prevailed and took over as a primary means of spamming and spreading malware and social engineering attacks became more sophisticated. But what we also know is that this year pales in comparison to what 2010 is expected to bring: fast flux botnets will dominate, IM spam will rear its head, rogue security software vendors will up their game, fraud targeted at social networking apps will grow, new CAPTCHA bypass techniques will emerge... to name a few.

That’s the bad news. The good news is that with a bit of preparation and the right security solutions in place, we can continue to outsmart the bad guys.
So without further ado, I present to you...

Joe Pendry | 17 Nov 2009 | 0 comments

Last week, Symantec announced its participation in the Lockheed Martin NexGen Cyber Innovation and Technology Center. This initiative supports the Symantec’s vision of providing comprehensive and long-term security solutions for the US Government through intimate knowledge of government requirements and challenges, forward-leaning technologies, and working relationships with the public and private organizations that drive governmental standards and vision.

As reported in Government Computer News, the center will "the new NexGen facility will be able to tap into the defense center's data feeds, or simulate government agency computing environments, and test various approaches to mitigate cyberattacks.... The new center also features dedicated distributed cloud computing and virtualization capabilities. Those capabilities would permit an...

jjesse | 13 Nov 2009 | 0 comments

Symantec has announced version 10 of its DLP product (formerly known as Vontu)  In a press release, Symantec touts DLP 10 as the

Symantec has announced Symantec Data Loss Prevention 10, the industry's first open data loss prevention (DLP) platform, which aims to give customers more options to find and fix data loss problems. As organizations strive to center their security strategies around information, DLP becomes essential.

Symantec DLP has undergone various changes since they purchased Vontu all geared to making the product stronger and more useful for the security professional.

DLP 10 will “allow companies to apply encryption and enterprise rights management (ERM) based on content and will integrate with additional Symantec products.

One of the products DLP 10 will integrate...

FrankPadavano | 10 Nov 2009 | 1 comment

To anyone who can assist,

I am running Symantec Endpoint Protection Version 11.0.3001.2224 on my 'laptop' and have an error with a scan recently completed.  I know that my files are corrupt as I have tmp files in my "Incomming Folder".  When I went online to find out how to correct the issue, it only provide me a solution for v 10.xxx and it only provides how it can be corrected via the Symantec System Center.  How can i revert to the previous definition set while working remotely on my laptop??

Regards

Frank

EandT | 09 Nov 2009 | 2 comments

We are stationed in Germany with the Air Force.  Unfortunately, our internet connection is so slow it drops the connection before Symantics update is finished.  We have a desktop and a laptop computer.  We acquire the updates on the laptop at the library, via their wireless server which is 100 times faster than our home internet.   What are other options to acquire updates, i.e., can we download the update on our laptop to a thumb drive and update our desktop?  We need any advise you can provide.  Thanks!

Sheri Atwood | 30 Oct 2009 | 4 comments
Study Reveals Small Businesses Lack Security Policies
 
The security threats to small businesses are increasing in complexity, number and frequency, and the volume of information they must protect and maintain continues to expand.  A surprisingly high number of Small businesses have yet to take even the most basic steps towards protecting their businesses, such as implementing antivirus or backing up their data. 
 
As part of Cyber Security Awareness Month, the National Cyber Security Alliance (NCSA) and Symantec partnered to conduct a survey on the cyber security awareness practices and habits of roughly 1,500 small businesses in the United States. The results showed that while 65 percent of those surveyed believe that Internet security is critical to their business, only 28 percent have formal Internet security policies.
...
TSE-JDavis | 30 Oct 2009 | 5 comments

Anyone looking for Scan Engine support on RedHat 64-bit may soon get their wish granted. I got a webcase recently and it was escalated to backline who have said they put in a feature request for Scan Engine to get certified on 64-bit version of RedHat Enterperise Linux (RHEL). Currently we support 64-bit SuSe Linux Enterprise Server (SLES) and Windows 2003 and 2008 64-bit environments.

Be advised this could still be 6 months or more down the road since 5.2.6 is most likely already finished and this is something we might see in 5.2.7.

Watch this document for updates:

Title: 'Is Scan Engine 4.3.x, 5.1.x, or 5.2.x is supported on a 64-bit Redhat Linux operating system?'
Document ID: 2008072107050554
> Web URL: http://service1.symantec.com/SUPPORT/...