Endpoint Protection

 View Only
  • 1.  SEP 14 MP1 works with nexpose

    Posted Jul 03, 2017 05:21 AM

    Dear All,

     

    Good day. As I remember , the SEP 12 sometimes shows programs would block the nexpose traffic ( e.g. svchost.exe ) hence the nexpose fail to compelete the scan. Does any one know any improvement on version 14 MP1 ?

     

    Regards,

     

    Logan



  • 2.  RE: SEP 14 MP1 works with nexpose

    Posted Jul 03, 2017 05:47 AM

    Nexpose/InsightVM has always worked with SEP. You just need create an IPS exclusion where you add the Scan engine IP adresses.

     

    https://support.symantec.com/en_US/article.HOWTO81159.html#v8148757

     



  • 3.  RE: SEP 14 MP1 works with nexpose

    Posted 12 days ago
    I know this post is from 2017. The referenced URL is not working. Any update for SESC?


  • 4.  RE: SEP 14 MP1 works with nexpose

    Posted Jul 03, 2017 07:00 AM

    I've never had an issue with SEP and Nexpose, aside from what was already mentioned about adding the scan engine IP to the IPS excluded hosts section. This won't matter whether it's 12.1 or 14. Outside of that I can't think of any other issues.

    Are you seeing issues with something else?



  • 5.  RE: SEP 14 MP1 works with nexpose

    Posted Jul 04, 2017 12:05 AM

    Dear Torb and Brian,

    We are using unmanaged client, does it still works on it ? 

    Regards,

    Logan



  • 6.  RE: SEP 14 MP1 works with nexpose

    Posted Jul 04, 2017 02:45 AM

    have you tried to disable active response ?

     

    also have a look at this forum to add IP address exclution to unmanaged SEP client.

     

    https://www.symantec.com/connect/forums/network-threat-protection-exclude-ip-unmanaged-client



  • 7.  RE: SEP 14 MP1 works with nexpose

    Posted Jul 04, 2017 03:02 AM

    Dear Praveen Ayappan,

    I have already added a rule in it before scanning but still get such result .

    Thanks for your suggestion.

    Regards,

    Logan



  • 8.  RE: SEP 14 MP1 works with nexpose

    Posted Jul 05, 2017 10:06 PM

    Dear all,

    Any suggestion about my case ?

    Regards,

    Logan



  • 9.  RE: SEP 14 MP1 works with nexpose

    Posted Jul 06, 2017 07:27 AM

    Unlike the managed client, the unmanaged client does not allow for the ability to exclude hosts in the IPS policy. I believe you'll need to temporarily disable the IPS on the client to run the scan.