Learn how to configure and manage policies for Symantec Endpoint Protection (SEP) to obtain optimal results in your environment.

See also:

• Common Issues 101 for Endpoint Protection
• Install and Upgrade 101 for Endpoint Protection
• Security Threats 101 for Endpoint Protection

Contents

• Security policies
• Content policies
• "Allow" policies
• "Block" policies
• User or client prevention policies
• Scan policies
• Application and Device Control policies
• Additional policy configuration and management

Security policies

• Recommended security policies

Content policies

• Reduce bandwidth of content
• Specify when to update content
• Specify what content to update:
  • Update virus definitions and content for Endpoint Protection
  • How to update content and definitions on the clients
• Using Group Update Providers to distribute content to clients

"Allow" policies

• Allow specific traffic on the network
• Allow specific devices

"Block" policies

• Block specific traffic on the network
• Block USB devices
• Block specific devices
• Block files

User or client prevention policies

• Preventing users from disabling protection on client computers
• Password-protecting the Symantec Endpoint Protection client - prevents users from uninstalling the client
• Enabling or disabling client submissions to Symantec Security Response
  • Understanding server data collection and client submissions and their importance to the security of your network

Scan policies

Creating exclusions

• Exclude files from scans
• Exclude folders from scans
• Exclude file extensions from scans
• Exclude trusted Web domains from scans
• Exclude known risks from scans

Creating exceptions

• Monitor an application to create an exception for the application
• Create exceptions from log events
• Create file exceptions for Tamper Protection
• Allow applications to make DNS or host file changes

Configure or schedule scans

• Schedule user-defined scans on the client
• Schedule scans from Endpoint Protection Manager for Windows-based clients
• Scan network drives
• Schedule scans in a VMware environment

Application and Device Control policies

• Application and Device Control policy best practices
• About the structure of an Application Control and Device Control policy
• Add Application Control rules
• Add custom rules for Application and Device Control policies
• Best practices for choosing which condition to use for a rule

Additional policy configuration and management

• Policy management in Endpoint Protection Manager
• Update policies on Windows-based clients
• Apply policies based on location (location awareness)
• Configure policies on a Mac-based clients
• Create Centralized Exceptions policies
• Configure LiveUpdate policies