Endpoint Protection

 View Only

  • 1.  SEP clients internet access

    Posted Aug 08, 2011 08:16 AM

    Hi,

    We are testing SEP 12 in our company. When i look at web reports, i see that sometimes SEP clients is trying to go a website http://ent-shasta-rrs.symantec.com by tehmeselves. We want to disable this feature, prevent clients to aceess internet. This issue is importnat for us. Can anyone know how i can disable this setting?

    Thanks,

    Huseyin



  • 2.  RE: SEP clients internet access

    Trusted Advisor
    Posted Aug 08, 2011 11:01 AM

    Hello,

     

    This is an Insight website: https://ent-shasta-rrs.symantec.com

     
    SEP Clients connect to the Insight website, this could not be disabled. This is by design.
     
    How to test connectivity with Insight and Symantec Licensing servers
     
     
    Required exclusions for proxy servers to allow Symantec Endpoint Protection to connect to Symantec reputation and licensing servers
     
     

    Also, To test connectivity from a SEP client system to the Symantec Reputation server, at the SEP client system, type the following URL In a web browser:

    https://ent-shasta-rrs.symantec.com/mrclean

    Receiving the error 405 means the server is visible to the client.

    If the connection is working correctly, you will see HTTP 400 Bad Request.

     



  • 3.  RE: SEP clients internet access
    Best Answer

    Posted Aug 08, 2011 11:53 AM

    Hi,

    1 In the console, select Clients then click the Policies tab.
    2 In the Settings pane, click External Communications Settings.
    3 Click the Submissions tab.

    Uncheck what you don't want to submit to Symantec.

    Ref: Implementation_guide_SEP12.1.pdf (it's in the installation media).



  • 4.  RE: SEP clients internet access

    Trusted Advisor
    Posted Aug 08, 2011 12:23 PM

    Hello,

    This Option would Let Symantec Endpoint Protection use Symantec's reputation database to make decisions about threats. The reputation database is called Symantec Insight. Queries to the database are called Insight lookups.

    Download Insight, Insight Lookup, and SONAR use Insight lookups for threat detection. Symantec recommends that you allow Insight lookups if possible. Disabling Insight lookups disables Download Insight and may impair the functionality of SONAR and Insight Lookup.

    However, you can disable this option if you do not want to allow Symantec to query Symantec Insight. For example, your company may require you to turn off external communications with the network so that data never leaves the client.

    This option is enabled by default.



  • 5.  RE: SEP clients internet access

    Posted Aug 09, 2011 01:14 AM

    Hi,

    Thank you for your replies. In our company we have to prevent some users for accessing to internet. They must use only local network. So i guess External Communications Settings is exactly what we are looking for.

    Thank you,

    Huseyin