Endpoint Protection

Hello,

We have SEP installed on our systems with Proactive Threat Scan, but I have seen the new SONAR 2 Component in the Norton Product Line which has seemed to be quite effective in identifying unknown malicious code, does the SEP Truscan Incorparate this technology?



Thanks,

Tony Baylis

Hi,

Please find the useful articles:
What is Proactive Threat Protection?
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007102515015148

What's new in Symantec Endpoint Protection 11
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007090318343048

Moin

Also.. wrong forum.

Moving to Endpoint Forum

No symantec endpoint protection does not use the sonar 2 component it is more directed to the consumer market. 

Hello,

Okay, so if the SONAR 2 component is not used, is the Component used in SEP as effective (or more so) when for example, on our systems they are set to maximum setting (accepting that there will be more false positives)?

Regards,

Tony Baylis

Maximum sensitivity means high false positive..
However you can test max sensitivity few of your clients below having max sensitivity on all the clients.

B'coz even false positive will differ in different organizations.

The sonar 2 is superior to what is in sep because its a real time scanner . You can change the scan frequency but may experience performance issues. You can also turn up the sensitivity to max and test, I have been using it like that for 6 months and have had no false positives. 

I think they are testing the sonar2 product in the consumer market before they use in corporate product. Norton Antivirus usually has the more bleeding edge technology.

Hello,

Thank you for the responses,

So if we put our sensitivity on proactive to maximum as we will not install many applications that will generate false positives,is the protection provided a lot more solid and can detect most if not all unknown threats (accepting a small amount will not be found?). Also we have set up Proactive to scan every minute with new processes to be auto scanned and haven't seen any real performance degredation.

The protection should be more capable of detecting unknown threats! Just to let you know you have selected your response to be the solution....

Koosah,  on which product have you run at max sensitivity without false positives?  NAV Sonar or SEP TruScan PTP?

Thanks
John

SEP TruScan PTP

Thanks