Endpoint Protection Small Business Edition

 View Only

  • 1.  How to config Intrusion Prevention Signature Custom to block application?

    Posted Aug 13, 2010 09:23 AM
    Now, i wanna block application (EX: yahoo messenger).how to use Custom Intrusion Prevention Signature to block it & pls help me how to creat signature for others application (Firefox, office...)

    Pls, help me.Thanks for your help!



  • 2.  RE: How to config Intrusion Prevention Signature Custom to block application?

    Posted Aug 13, 2010 10:23 AM


    How to block/allow website access using the Symantec Endpoint Protection Manager custom Intrusion Prevention Signature policy

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008070803545448


     


  • 3.  RE: How to config Intrusion Prevention Signature Custom to block application?

    Posted Aug 13, 2010 10:23 AM
    I'm not sure Intrusion Prevention will accomplish what you want it to accomplish; it sounds like what you really want is Application and Device Control.

    Title: 'Creating custom IPS signatures'
    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007101708052548

    sandra


  • 4.  RE: How to config Intrusion Prevention Signature Custom to block application?

    Posted Aug 14, 2010 12:02 AM

    Thanks for your help!
    Now, I can block Website by creat IPS Signature!
    But when i creat Custom IPS Signature --> In the Content field, type the "syntax of the signature"

    I have read an example for NetBiosGroup Signature!But i can't understand it!
    Pls explain for me this problem "syntax of the signature"


    If u can,pls give me another example!(EX: i wanna block yahoo messenger)
    Thanks all!


  • 5.  RE: How to config Intrusion Prevention Signature Custom to block application?
    Best Answer

    Posted Aug 14, 2010 01:00 AM
    Please follow the link 
    https://www-secure.symantec.com/connect/forums/it-possible-block-all-messengers-yahoo-messenger

    There is a document for creating IDS too, check that..


  • 6.  RE: How to config Intrusion Prevention Signature Custom to block application?

    Posted Aug 17, 2010 12:57 PM
    Thanks all!
    Now i wanna block USB devices,I assign Device Control Policy but it's only  success with Client run OS 32bit!(Win7,2k3,XP...).Others OS x64 (Win7-x64,2k8-R2) no result!I can't solve this problem!I found some hotfix for Windows, update Drivers... but it's still failure...I'm still use USB device normaly...


  • 7.  RE: How to config Intrusion Prevention Signature Custom to block application?

    Posted Aug 17, 2010 02:10 PM

    Application and Device Control Policies do not work on 64-bit client computers.

    http://seer.entsupport.symantec.com/docs/331061.htm


  • 8.  RE: How to config Intrusion Prevention Signature Custom to block application?

    Posted Aug 18, 2010 01:03 PM
    Thanks your help! :D