Endpoint Protection

  • Private Community
 View Only

  • 1.  how to block access to hosts file

    Posted Feb 19, 2013 02:54 PM

    Hello All,

     

    I have created a policy on SEPM to block write, delete, replace on hosts file..

     

    It is working perfectly. When I try to edit that file, I receive DENY from SEP Client.

     

    My problem is when I edit, replace this file, using \\pc_to_change\c$\windows\system32\drivers\etc it is possible..

     

    Well, How can I block it???

     

    Thanks

     

    Diego



  • 2.  RE: how to block access to hosts file

    Trusted Advisor
    Posted Feb 20, 2013 06:28 AM

     

    Hello,

    Try UnLocking the ADC Policy.

    Check this Article:

    How do I Block hosts file modification using Symantec Endpoint Protection (SEP) Application and Device Control policy?

    https://www-secure.symantec.com/connect/downloads/how-do-i-block-hosts-file-modification-using-symantec-endpoint-protection-sep-application-

    Hope that helps!!



  • 3.  RE: how to block access to hosts file

    Posted Feb 25, 2013 10:52 PM

    Duplicate thread

    https://www-secure.symantec.com/connect/forums/block-access-hosts-file#comment-8410421

     

     

    Check this thread

    https://www-secure.symantec.com/connect/forums/hos...

     

    Hardening Symantec Endpoint Protection (SEP) with an Application and Device Control Policy to increase security

    Article:TECH132337  |  Created: 2010-01-08  |  Updated: 2012-03-13  |  Article URL http://www.symantec.com/docs/TECH132337
     

     



  • 4.  RE: how to block access to hosts file

    Posted Feb 25, 2013 11:29 PM

    Hello

    Check this thread

    https://www-secure.symantec.com/connect/forums/hosts-file-modified