Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.
Security Community Blog
Showing posts in English
Bijay.Swain | 06 Oct 2009 | 1 comment
We are using 1000 license of SCS 3.1 . And all of the Pcs are spread over 20 Km area .  Now we are upgrading those clients to Symantec Endpoint Protection.
Now the problem is we are in a workgroup model network (No active directory domain) so we can’t use group policy/Login script/domain admin account to use push deployment feature of SEP. And Sep doesn’t have any web deployment feature like SCS had earlier. I searched for any option for remote deployment in a workgroup model network but unable to get any solution.
So decided to try something which will work in my environment and I came up with an idea, which I have recorded (procedure) as a .swf  file and putting it in the website .It may help others to deply client in workgroup.
Best feature of this is it also removes the old version of Symantec antivirus if present on the client system. You just have to call the user and ask him to open the website...
riva11 | 02 Oct 2009 | 2 comments

I read an interesting article on PC Authority " Fake Antivirus: 5 software titles you should definitely NOT install ", there is a good description about the dangerous attacks by rogue security products.

Follows the Top 5 list of rogue security software titles to avoid (extract from Fake Antivirus: 5 software titles you should definitely NOT install ) :

1) SpySherrif

How it works:  This piece of malware does it best work by informing computers of false threats to their system. It's mostly found via web typo's (Toggle) and via infected software downloaded over P2P networks.

Threat value:  SpySherrif is extremely difficult to...

riva11 | 02 Oct 2009 | 3 comments

According to the IANA assignment , TechPosters published a nice poster in PDF file that shows common ports using a graphical design to give also information about ports used for Chat, Gaming, Malicious, Peer to Peer , etc. applications.


The Techposters website, where I found this poster, is a collection of quick reference guide posters in pdf format. They have been collected from various sources on the Internet and available for IT admins and many other users interested in many operating systems. These tech posters covers Unix, Linux and Microsoft operating systems and also software programs, platforms and scripts.

Link : TechPoster Common Ports


TSE-JDavis | 01 Oct 2009 | 0 comments

I was able to raise a SuSe Linux 10.2 64-bit server and get Domino, Mail Security for Domino MPE 3.2.7 and Scan Engine 5.2.5 to all run at the same time with 512Mb of RAM. This is just proof of concept but for a small business that has limited resource this coule be valuable information.

The trick is installing Mail Security for Domino MPE first and the installing Scan Engine. Since they both use Java Liveupdate, you need to have Scan Engine be the most recent Java Liveupdate install which will be JLU 3.0. SMS will be able to use it still since it appears to be backwards compatible.

mthompson | 29 Sep 2009 | 4 comments

I'm a bit confused about the renewal of SEP11.0.  I know it no longer requires a license file or activation but i'm confused about yearly renwal.  Has that gone away?  My system never says its out of date or that the virus definitions have expired.  How am I to know if they have exprired or need renewal? Especially if my system always has a current up to date - date.

I also recenlty installed this on a completly different network for another company and it installed with old 2008 definitions with the warning that said it was out of date but than it did a Live Update and all was well.  I haven't registered anything yet, so this new system is doing the samething, how to know if it is out of date?

Do I really have to worry about this anymore if I buy it once, am I all good?  Confused on what the web-site says and what a Sales Rep says.

---- also on the same note, if I don't have to renew every year is this beacuse Symantec...

Kedar Mohile | 28 Sep 2009 | 2 comments

Migrating SEPM DB to SQL 2008

The procedure would remain same as before. You might want to check the following

  1. Remove the SEPM from any replication setup with other SEPMs
  2. Backup the SEPM server certificate
  3. Backup the existing SQL database using SEPM backup and Restore wizard
  4. Install an instance of Microsoft SQL Server 2008
  5. Uninstall the Symantec Endpoint Protection Manager
  6. Reinstall the Symantec Endpoint Protection Manager configured to use a new Microsoft SQL Server 2008 database
  7. Restore the SEPM server certificate
  8. Restore the backup copy of the database
  9. Reconfigure the Symantec Endpoint Protection Manager database to recognize Microsoft SQL Server 2008 by running Management Server Configuration Wizard

Reference: Symantec Endpoint...

Hinata Uzumaki | 24 Sep 2009 | 1 comment

The latest version for Data Loss Prevention is version 9.0.

Customers who are eligible for this upgrade will receive upgrade notifications but there will be no license keys. They just need to use the same key that they have for version 8.0.

If customer has just purchased DLP 9.0 and he wants to downgrade to version 8.0, he can use the key for DLP 9.0 to version 8.0.

DLP 9.0 key is backwards compatible to 8.0.
DLP 8.0 key is forwards compatible to 9.0

ohzone - CherylPeterson | 23 Sep 2009 | 5 comments

We've had numerous questions regarding Windows 7 and which Symantec products will support the new OS and when. In effort not to duplicate information and keep updates as current as possible we are providing this link to the site:

This FAQ page contains a list of products and release dates along with links to the individual product pages.

aNgeLiQuE | 23 Sep 2009 | 2 comments

Data Loss Prevention (Vontu)


Version #

Release Date*

End of Standard Support

Current version

Data Loss Prevention (DLP) 8


Upgrade to current version from


Supported versions


Unsupported & End of Life versions


What does this product do?

Vontu Data Loss Prevention 8 from Symantec is the industry's first integrated solution that combines both endpoint and network-based software to protect confidential wherever it is...

Twixxica_09 | 23 Sep 2009 | 7 comments

Symantec Endpoint Protection Small Business Edition 12.0 VS. Symantec Enpoint protection 11.0

What is the difference between SEP SBE 12.0 and SEP 11.0?
- SEP SBE 12.0 is a product optimized for Small Business (<=100 nodes) customers.
- It is much easier to install and use.
- SEP SBE has all the features of SEP 11.0 except for Application and Device Control. It also does not support NAC.
- With the introduction of SEP SBE 12.0, Symantec now has targeted offerings based on customer segment.
- If the customer is larger than 100 users, you should recommend SEP.
- If your customer has less than 100 users, SEP SBE is the better fit.

Can I install SEP SBE 12 over SEP 11?
- SEP SBE 12.0 clients can be installed over SAV 9.x or later, SCS 3.x, or previous SEP 11.x installs.

Can I migrate SEP Manager from the SEP 11 Management Console?
- A customer that has SEP 11.0 deployed will have to uninstall the manager...