Endpoint Protection

 View Only
  • 1.  How to create a Exceptions , by file name or by appication?

    Posted Sep 19, 2018 03:58 PM

    Hello,

    I like your support with the exceptions in sepm 14 , for example for DLP Symantec indicate the following:

    https://support.symantec.com/en_US/article.TECH220235.html

    Windows

    Endpoint Agent Installation Location C:\Program Files\Manufacturer\Endpoint Agent
    Endpoint Agent Temp Folder Location C:\Program Files\Manufacturer\Endpoint Agent\temp
    Processes

    edpa.exe
    wdp.exe
    cui.exe
    kvoop.exe
    brkrprcs.exe
    brkrprcs64.exe

    Drivers vfsmfd.sys
    vrtam.sys
    vnwcd.sys
    Files C:\Program Files\Manufacturer\Endpoint Agent\*.ead

    How is the better way to do a exception? from process and drives and if exclude all the folder instalation I need exclude one to one .exe files?

    This the way how I create a Rule, is correct?

     

     



  • 2.  RE: How to create a Exceptions , by file name or by appication?

    Posted Sep 19, 2018 04:07 PM

    Doing it by folder is ideal. If doing it by appication then the full path to the name is needed.



  • 3.  RE: How to create a Exceptions , by file name or by appication?

    Posted Sep 19, 2018 04:17 PM

    Brian,

    In this case with the exception by folder is done , and add the tamper exception....

    In whats case I have to use a application exceptions? 

     

     



  • 4.  RE: How to create a Exceptions , by file name or by appication?

    Posted Sep 19, 2018 04:25 PM

    If you only need to exclude one or two names, instead of doing the entire folder, which increases the risk level because the entire folder is excluded when it may not be necessary.



  • 5.  RE: How to create a Exceptions , by file name or by appication?

    Posted Sep 20, 2018 01:53 AM

    You would use exclude by application when you are not sure about the exe path, 

     for ex:

    c:\users\userName\XXXX\XXXX\application.exe

    since you cannot exclude all the  users who login to the machine using %username% variable ( not available with SEP) You will exclude it by name... else exclude by Path

     

     



  • 6.  RE: How to create a Exceptions , by file name or by appication?

    Posted Sep 20, 2018 05:13 AM

    Hi Tokyo2040,

    These articles may be of interest:

    Exceptions, Illustrated: Part One

    https://www.symantec.com/connect/articles/exceptions-illustrated-part-one

     

    Exceptions, Illustrated: Part Two

    https://www.symantec.com/connect/articles/exceptions-illustrated-part-two



  • 7.  RE: How to create a Exceptions , by file name or by appication?

    Posted Sep 20, 2018 05:13 AM

    Hi Tokyo2040,

    These articles may be of interest:

    Exceptions, Illustrated: Part One

    https://www.symantec.com/connect/articles/exceptions-illustrated-part-one

     

    Exceptions, Illustrated: Part Two

    https://www.symantec.com/connect/articles/exceptions-illustrated-part-two



  • 8.  RE: How to create a Exceptions , by file name or by appication?

    Posted Sep 20, 2018 05:13 AM

    Hi Tokyo2040,

    These articles may be of interest:

    Exceptions, Illustrated: Part One

    https://www.symantec.com/connect/articles/exceptions-illustrated-part-one

     

    Exceptions, Illustrated: Part Two

    https://www.symantec.com/connect/articles/exceptions-illustrated-part-two



  • 9.  RE: How to create a Exceptions , by file name or by appication?

    Posted Sep 24, 2018 05:57 AM

    Hi Tokyo2040,

    Just a ping to see if you were able to find your answer?  The thread is still marked "needs solution."