Endpoint Protection

 View Only

  • 1.  What is the purpose of JAVAFX in SEPM 12.1.6 (MP5)?

    Posted Jan 30, 2017 12:17 PM

    I am running with an external SQL database and this is primarily a Virtaul Environment.  Our Cyber Security Team is requesting justification for javafx.com that shows up on my server.  Can anyone tell what is the purpose of this?



  • 2.  RE: What is the purpose of JAVAFX in SEPM 12.1.6 (MP5)?

    Posted Jan 30, 2017 12:24 PM

    SEPM uses Java under the hood. JavaFX is what part of the app is built on.

    https://en.wikipedia.org/wiki/JavaFX



  • 3.  RE: What is the purpose of JAVAFX in SEPM 12.1.6 (MP5)?

    Posted Jan 30, 2017 03:09 PM

    Thanks Brian ... I am having to justify several URL/Domains ... so you are saying the SEPM Console is built in part using JavaFX, correct?

    I have a few others in question as well ... If there is a document somewhere that will help me answer these also, I would appreciate it.

    What is the purpose of the following ...

    symcd.com

    symcb.com

    verisign.com 



  • 4.  RE: What is the purpose of JAVAFX in SEPM 12.1.6 (MP5)?

    Posted Jan 30, 2017 03:14 PM

    Are you talking about outbound connections from SEP clients going out of your gateway firewall? The list of all exclusions is here:

    http://www.symantec.com/docs/TECH162286

    symcd, symcb, and verisign are all used for checking certification status. They should be using the OCSP protocol.



  • 5.  RE: What is the purpose of JAVAFX in SEPM 12.1.6 (MP5)?

    Posted Jan 30, 2017 03:19 PM

    Certification as in licensing?



  • 6.  RE: What is the purpose of JAVAFX in SEPM 12.1.6 (MP5)?

    Posted Jan 30, 2017 03:24 PM

    No. Digital certificates. Revocation status is probably being checked. I don't have much more info on it though nor can I find a corresponding KB article. Symantec purchased Verisign's authenticaton business unit some years back so this is why verisign shows up.



  • 7.  RE: What is the purpose of JAVAFX in SEPM 12.1.6 (MP5)?

    Posted Jan 30, 2017 03:27 PM

    How about trafficmanager.net

     



  • 8.  RE: What is the purpose of JAVAFX in SEPM 12.1.6 (MP5)?

    Posted Jan 30, 2017 03:29 PM

    I believe that is part of Microsoft Azure.



  • 9.  RE: What is the purpose of JAVAFX in SEPM 12.1.6 (MP5)?

    Posted Jan 30, 2017 03:30 PM

    Does SEPM use Verisign.com specifically ... I am having to justify it being on the server?



  • 10.  RE: What is the purpose of JAVAFX in SEPM 12.1.6 (MP5)?

    Posted Jan 30, 2017 03:32 PM

    There are SEPM/SEP processes that make connections out to Verisign so I don't see why it wouldn't be allowed.Microsoft may as do this. Best bet is to run a pcap and see what's going on to get at that level of detail.