SES v16, first impressions & couple of questions

[Aleksandar Devecerski]

Hello everyone

Received SES v16 announcement email last night so I've installed it on a couple of test machines (few workstations, one server). Installation went smooth, without making local install cache like v14. Endpoint Security agent works fine, from this install sample I cannot determine if it has lighter footprint then v14, but it definitely isn't heavier.

Couple of questions came up immediately, for me at least:
1) Server install package, seems to be configured the same way as in v14, it does not include Firewall, Intrusion protection, Proactive Threat Protection,.... 
We are using SES firewall (and these other options) on servers as well. Servers have their own group in Device Groups. The way to acomplish this in v14 was from Control Panel, Programs, Uninstall, Change and then add these components, but v16 has uninstall only.
Settings & actions for Workstation

and Settings & actions for Server

I tried installing Workstation package on a test VM server, 'Endpoint protection' tab has appeared in 'Settings & actions' but with only 2 available options 'Enable Auto-Protect' and 'Enable Device Control'.

But when I move this endpoint from Workstation Device Group to Servers group even these two disapear, along with 'Endpoint protection' tab.
Is there a way to use SES firewall on the Server OS with SES v16?

2) Exclusions directly at the endpoint (not via policy): is it possible to add/configure and if it is, how?

3) smc -stop/smc -start is not working. Is there a replacement command?

Regards

[Aleksandar Devecerski]

OK, after some online help reading some of the questions have been answered
1) -> Feature Selection Policy (not applied by default)
3) -> agentcli service stop / agentcli service start (agentcli command line options)

But, I stumbled into another issue
4) User on-demand scan from Windows GUI (right click -> "Scan for viruses..." is missing. How to enable?
Also, I don't see any way for user to initiate any kind of scan on the endpoint 

[Russ_V]

Aleksandar, 

Thanks for using the Broadcom Community!

Allow me some time to research these questions and I'll get back to you.  

Thanks,

Russ_V

[Russ_V]

Aleksandr, 

Thanks for your patience on this and apologies for the delay. 

I've got a few more answers for you but I'm still waiting on others. 

#1. How do I run an on-demand scan from the SEP 16 user interface or right-click menu?

A. SEP16 does not have an option to start a scheduled scan or an on-demand scan, either in the user interface or by right-clicking a file and selecting Scan for viruses. However, you can run the agentcli doscan command. See Symantec Endpoint Protection product Windows Command-Line Options.

#2. Can I enable the right-click Scan for viruses command from the Windows operating system?

A. Not at this time

#3. The smc -stop and smc -start commands do not work. Is there a replacement command?

A. The agentcli command replaced the smc command, with different options. See Symantec Endpoint Protection product Windows Command-Line Options.

 
NOTE: All of this new info will be added to our public documentation once available.    

For additional info see this:
https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-security/sescloud/about-esa-sep/endpoint-security-agent-faqs.html

Let me know if you have any additional questions and as I get more answers I'll update this thread. 

Thanks,

Russ_V

[Aleksandar Devecerski]

Thanks for the information Russ