Endpoint Protection

 View Only
  • 1.  Use SEP to Remove File Type

    Posted Aug 13, 2012 09:29 AM

    Is there a way to use SEP 11 to remove a specific file type?

    I have been tasked with trying to use SEP to remove all PSTs within our environment.  I'm thinking this could possibly be done by creating an Application and Device Control policy.  I see some stuff that appears like we could flag on these files type but I'm not seeing anything about allowing an administrator to delete these files.  It looks more like I can Allow Access, Block Access, Terminate Process but not delete the file or quarantine it.

    Does anyone have any other ideas?

     

    Thanks,

    Mike



  • 2.  RE: Use SEP to Remove File Type
    Best Answer

    Trusted Advisor
    Posted Aug 13, 2012 09:34 AM

    Hello,

    Deleting safe files could not be performed via SEP.

    SEP would only delete the files in case if these files are malicious and could not be repaired (in respect to policies)

    You would have to search for other ways to delete these .pst file.

    .pst files are related to MS outlook.

    Are you facing any issues concerning to Security Risk?

    Hope that helps!



  • 3.  RE: Use SEP to Remove File Type

    Posted Aug 13, 2012 10:27 AM

    No.  There is currently no risk related to these PST files.  Although management is requesting me to look into the ability of SEP to identify a specific file type and remove those files.  From what you're saying and the research I've done this is not possible.  At best it appears like I could create a policy in Application and Device Controls to have these files blocked from be used.  But no way to quarantine or delete them.



  • 4.  RE: Use SEP to Remove File Type

    Posted Aug 13, 2012 11:05 AM

    Yes, you can use ADC to block access to these file but that is about it. As mentioned, SEP doesn't have this ability.