Endpoint Protection

 View Only

  • 1.  keep SEP just monitor and stop clean or delete files

    Posted Sep 18, 2018 03:23 PM

    hi 

     

    I have a big problem with SEP when I install it on any client either windows domain server or some other application server it stops everything and also quarantines some application files, kindly I need your help as soon as possible to deal with this issue I need to make a client package with just log only and not take action like quarantine or clean or delete just to monitor and log.



  • 2.  RE: keep SEP just monitor and stop clean or delete files

    Posted Sep 18, 2018 07:23 PM

    Just add exclusions for what you need. Setting everything to log only is a big security risk. May as well not even use AV at that point.



  • 3.  RE: keep SEP just monitor and stop clean or delete files

    Trusted Advisor
    Posted Sep 19, 2018 09:11 AM

    Hello,

    Check the Recommended settings for SEP.

    https://support.symantec.com/en_US/article.TECH173752.html

    However, in your case, you may go ahead and change the policies Security Risk detections: 1st action / and 2nd action if first fails as "Log only"

    Hope that helps!!