Endpoint Protection

 View Only

  • 1.  Security response set as homepage

    Posted Feb 07, 2011 04:49 AM

    Hello.

    I have an issue with SEP 11 RU6 MP2.

    It appears that it has automaticaly set Symantec security response web page as homepage.

     

     

    http://www.symantec.com/enterprise/security_response/index.jsp

    It has happened a few times before and is a problem as I have to have a specific homepage set.

     

    What is the reason for that? Any way to prevent ih happen again?

    I have no risks on mentioned computers and SEP definitions are up to date.

    Regards,

    Mario



  • 2.  RE: Security response set as homepage

    Broadcom Employee
    Posted Feb 07, 2011 05:08 AM

    Hi,

    Is it happening for all the SEP clients or single SEP client ?



  • 3.  RE: Security response set as homepage

    Posted Feb 07, 2011 05:12 AM

    Hi!

    It happened only a few times on random computers with SEP 11 client.



  • 4.  RE: Security response set as homepage
    Best Answer

    Broadcom Employee
    Posted Feb 07, 2011 05:24 AM

    hi

    this has happened becuase machine found a risk and it repaired risk and set this home page.

     

    This setting is confogured under the AV/AS policy under Miscellaneous section.

     

    Specifies a URL to use as the home page when a security risk hijacks a client computer's home page

    The client uses this URL when it repairs the risk.

    You can click the lock icon to prevent users from changing the home page to be used when repairing side effects after a browser hijacking.



  • 5.  RE: Security response set as homepage

    Posted Feb 07, 2011 06:07 AM

    Pete is right ..However this can also happen due to false positive when you have Homepage set from GPO..However since in your case its happening in random computers make sure you scan these machines with latest virus definitions before changing the home page back



  • 6.  RE: Security response set as homepage

    Posted Feb 07, 2011 06:25 AM

    Pete thanks.

    This solves my problem. I should have looked a little more on the AV policy.

    Regards,

    Mario