I need a solution
in a risk report downloaded by column shows lot of options in that i need want to know Zone ID Portal URL Presence Portal Removable Files Portal
what is the difference in these three?
Thanks!!
0
↧
need information about Zone ID Portal and URL Presence Portal & Removable Files Portal
↧
DLP Network Incident Attributes
I need a solution
In Symantec DLP console, i can see sender WinNT://XYZ/567854. can anyone provide me LDAP lookup plugins to pull up Incident Attributes for Network incidents.
If i have to run any kind of script then please help me to understand step by step.
0
↧
↧
MacOS Catalina and Windows 10 1909 support?
I need a solution
Any ideas as to when we could expect support for MacOS Catalina and Windows 10 1909?
Currently using Desktop Encryption but I think this still applies to Endpoint Encryption.
0
↧
HOLD - Proxy SG & Site Review NFR License
I do not need a solution (just sharing information)
Hi,
I wanted to know how I could procure the NFR license to Proxy SG & Site Review. My organization has a Secure One partnership with Symantec.
I have been trying to get in touch with the Symantec partner phone number and have emailed them too but have not come even a step further towards resolution.
What are the general steps of purchasing this license? I hope I am not missing any steps in between.
Thanking you in anticipation of a healthy resolution!
0
↧
Attack: OpenSSL Heartbleed CVE-2014-0160
I need a solution
Hello,
In the Symantec console, messages appears for example:
SID: 27517 Attack OpenSSL Heartbleed CVE-2014-0160.
But if I look through all logs I don't see such an entry. Where can I find the log that I can analyze the message more closely?
Sincerely
Davide
0
↧
↧
Nancrat Activity4 Trojan Detection
I need a solution
Dear All,
We have been going through unusual expereince recently, as 5 of our servers indicated to be infected from EDR with "Trojan.Nancrat Activity 4" However, after full scan nothing detected, after checking the Event Viewer it mentioned that outgoing traffic has been blocked for External IP "124.84.242.10" and later different IP after we blocked the first one.
After running "Symantec diagnostic tool" it detected safe files we are using for the last 2 years and last change was last year. We upoloaded the Files to Symantec and they said it is clean and they have no clear explaination to what happened. My only question at this situation is that means our network is compromised as there is Traffic to external IP from our servers? And how to identify that? We run the below and no clear indications of anything:
1- Full Scan with Symantec
2- Full Scan with ESET Online Scanner
3- Full Scan WIth Malwarebytes
4- Full Scan with Symantec Diagnostic
5- Check Event Viewer
6- Run SCAN in Safemode
7- Upload infected Files to Symantec and it is clean.
Please support.
0
↧
Include Local AppData for Inventory Scans
I need a solution
I noticed in my software inventory policies that *AppData* folders are excluded by default. If I just added an inclusion of %LocalAppData%, anyone know the effect of doing this? Not sure what *AppData* folders will get scanned, if any, with this overlap. For now, I'd prefer just scanning %LocalAppData% instead of removing the *AppData* exclusion which would scan all folders that included "AppData" in their name.
0
↧
DLP 15.x: Questions on DLP agent communication behaviour
I need a solution
Hi All,
Just curious on few things:
1) If at DLP Enforce level - the Endpoint DLP was added using IP but when we generate the clients we set the servers with hostname
-Will the settings persist to hostname only?
Or will the clients eventually being asked to refer to IP?
2) If we have 2-3 Endpoint DLP servers - can we see the server list at each DLP agent group?
-We can set primary, secondary at tertiary when generating and installing the DLP agent but can we see this servers list in client group?
Regards,
0
↧
Enforce Server Installation Issue
I need a solution
Hi,
Please give me some possible solutions.
I am struggling with installing a Symantec DLP Enforce Server. Please check the attachment.
---INFO---
OS: Windows Server 2016 Standard 64-bit
CPU: INTEL XEON CPU E5645 2.40GHz
RAM: 32GB
Installation plan: 2-tier (Oracle+Enforce / Detection)
Installation Location: D drive (1TB)
Oracle and JRE Server were installed successfully.
I want to know why the privilege issue is happened though I am installing with Administrator account.
Regards,
0
↧
↧
Category for domain and URL context does not match
I need a solution
I have a problem that client need to access to https://119.46.69.27/ESCFWEB/jsp/customer/main.jsp
I have submit this URL to WebPulse and I have got this email.
So I notify client to test but still cannot access to web. I have trace policy for this website but it still appear category as None
*I have already check this URL in proxy and it's already have category
So I submit 119.46.68.27 to WebPulse as well but I have got this email.
Is that mean when proxy check for category it will check in order like this:
https://119.46.69.27
https://119.46.69.27/ESCFWEB
https://119.46.69.27/ESCFWEB/jsp
https://119.46.69.27/ESCFWEB/jsp/customer
https://119.46.69.27/ESCFWEB/jsp/customer/main.jsp
0
↧
ICAP - DLP
I need a solution
Hello!
How are you?
I have a doubt... For example, here We have a DLP Service integrate with ICAP, but We did change to another DLP Server, so I did change the IP on ICAP service... But now every two hours on Health Checks the DLP Service is change to down for 10 seconds, and change again status to UP.
My doubt is: which response time is "ok" to this configuration? And how can I do this? Because the status of this Services is:
Last response time: 75 ms Average response time: 82 ms
Minimum response time: 25 ms Maximum response time: 146 msAnd I think that it's "ok" for the response time... But, the status sometimes is "down"... On ICAP configuration must I click on Sense Settings? What happens if click there?
Can anybody help me?
Tks!
0
↧
Windows Server Firewall on virtual server
I need a solution
Hi!
what are the best practices and risk/inconveniences (if any) to implement Firewall module on servers?
thanks
0
↧
SWG SSL Certificate using internal/private CA
I need a solution
Hi,
I am deploying hybrid solution by having SWG virtual appliance (on premise) and WSS on the cloud. My understanding for the SWG virtual appliance will have the following certificates :-
1 for the system admin to access to the console using https and 1 will be used for the internet traffic.
I am deploying 10 SWG in different location. By default, the SWG will create a self signed certificate for each of the SWG. This means will I have 10 self signed certificate to be installed in all the browser to trust the SWG. (plus the WSS cloud certificate).
Note I will have a SMC will certificate install.
My questions are
1) Can I have the step on how to create a CSR and then sign by my private CA ?
2) Can I have only 1 main certificate to install in the SWG (for internet traffic. not for the system admin access to the console using https). This will allow me to install 1 certificate to all browser instead of 10 certificates). If yes, how do can I do it ?
Thank you.
0
↧
↧
How can I get the newest Sysinfo viewer.
I need a solution
Are there anyone else know how to get newest version Sysinfo viewer?
I'm using Sysinfo viewer 3.0 beta now.
In these days, the new SGARS was released .
But it doesn't work properly when I post the large file as like snapshot or stats.
So, I want to use it for altenatively tools of SGARS.
0
↧
For mirrored gateway
I need a solution
Hello
Customer want to use the casb for the management and unmanagemnt decice.
I know we can cover it from mirrored gateway.
Can you share the document of deplyment or install ?
Thanks
Aiden.
0
↧
Has anyone ever migrated from Microsoft TMG to SGProxy thru Citrix Authentication?
I do not need a solution (just sharing information)
Has anyone ever migrated from Microsoft TMG to SGProxy thru Citrix Authentication?
0
↧
Ghost error Input not supported
I need a solution
So I randomly have issues with computers where I go to reimage them and I get a screen showing "Input not supported". I've tried different monitors and different cables but I cant find a way to fix it. I thought it might just be because I was running an old GSS so I went to update that but now I cant connect to the sql server, fun fun. So, Anyway, anyone got a way to fix the "Input not supported" Issue?
0
↧
↧
Licence for Symantec Encryption Desktop
I need a solution
I'm have to a demo with Symantec Encryption Desktop functionalities, is there any way I can have a trial version of (file share encryption) or (drive encryption) if not how can I buy the license?
0
↧
Client-only patch 14.2 RU2 fails with CRC match failed
I need a solution
The download is proper however, when attempting to upgrade a client from 14.2 RU1 MP1 build 4814, I get the following error in the SEP_INST_PATCH.log
11/19 20:26:03.109 [24adc] (LaunchXDeltaInternalAndWait) Launching: "DummyXdeltaPath" -d -s "\\?\C:\ProgramData\Symantec\Symantec Endpoint Protection\14.2.4814.1101.105\Data\Cached Installs\dcsagent.cab""C:\Users\XXXX\AppData\Local\Temp\SymDelta_179728\Patch.dax.tmp\dcsagent.cab.DIFF""\\?\C:\Users\XXXX\AppData\Local\Temp\pft30E0.tmp\SmcLU\dcsagent.cab":
11/19 20:26:03.259 [24adc] (CDeltaApplyThread::run) 150236 \\?\C:\ProgramData\Symantec\Symantec Endpoint Protection\14.2.4814.1101.105\Data\Cached Installs\sep_NE.slf CRC match failed.
11/19 20:26:03.260 [2b890] (SymDelta::CXDeltaTool::Apply) Return Code: 31
11/19 20:26:03.260 [2b890] (SymDelta::CSymDelta::processDirs) ApplyDelta Operation failed.
Any ideas? Do I need to do a full client reinstall?
0
↧
Hi, I am unable to install the DLP 15.0
I need a solution
Hi, I am unable to install the DLP 15.0 in my system. while installing i am not getting any error but the services (EDPA & WDP) are not coming in services.msc. can you please help me on this.
0
↧