Endpoint Protection

We have some clients that need "testing" to be done on their definitions for 24 hours before we are allowed to roll them out.  This morning while selecting yesterday's definitions to roll out I noticed a new content type within Virus and Spyware definitions.  AP Portal List 12.1 RU2.  This is on the 12.1 RU1 MP1 management server(s).  We are testing 12.1 RU2 beta so I checked on that management server and the AP Portal List 12.1 RU2 is in there also. 

Just wondering if anybody knows what this is for?  Thanks.

Got a screenshot of this?

Screenshot attached.

Perhaps it has something to do with Download Insight, which is an integral part of Auto-Protect. Download Insight only works with "portal applications" such as IE or Firefox.

See here:

http://www.symantec.com/docs/HOWTO55252

That was my thought as well.

Hopefully a Symantec employee can weigh in.

Yes, its Download Insight.  We have a list of "portals" which are applications that are monitored for downloads.  When a download is detected through one of these defined applications, we trigger an Insight lookup on the file it downloaded.

Up until now, we have only been able to update these lists with a product update. With SEP 12.1 RU2, these will become LiveUpdateable, hence the new content stream.

Awesome!  Thanks for the responce Paul.