The few clients we have pointing to the GUP have not updated their definitions and have been reporting back to the GUP consistently for several hours.

The SEPM is updating the check-in time, but the clients are not getting the latest definitions from the GUPs.

What can we do to force the clients to get definitions from the GUP?

1402076473

↧

adding package for different language

June 5, 2014, 6:47 am

≫ Next: Pgpnetshare.exe Command line functionality not looking up group users when re-encrypting with a group as the admin role.

≪ Previous: Clients not updating Defs from GUP

I need a solution

Hello

I need to add a french package to Endpoint Protection Manager , where can I find the .zip file so I can import it the SEPM?

Do I have to download the full SPEm in french , and only take the client package?

thanks.

↧

Pgpnetshare.exe Command line functionality not looking up group users when re-encrypting with a group as the admin role.

June 3, 2014, 7:01 am

≫ Next: Symantec Encryption Desktop as a replacement for TrueCrypt

≪ Previous: adding package for different language

I need a solution

I have the following setup:

An "Admin Group" containing myself and several other people I want to be able to re-encrypt folders as needed.

A "User Group" of people that should not be able to manage the File Share, but can decrypt content.

My personal key/account.

I'm able to use either the Windows UI or the pgpnetshare.exe command line to create an encrypted file share such that the "admin group" has the admin role, my account is a group admin, and a "user group" is assigned as a user role. Here's the command line I use for that:

pgpnetshare -e --recipient-owner "ADMIN GROUP KEYID" --recipient-operator "MY KEY ID" --recipient "USER GROUP KEY ID" --signer "MY KEY ID" --passphrase "MY PASSPHRASE" --universal-server "pgpserver.mycompany.com""C:\encrypted_file_share_folder"

With that, I'm able to have other people in the "Admin Group" re-encrypt and otherwise change the file share folder as needed through the Windows UI, but what I'm not able to find a way to re-encrypt or change anything using the command line application on the new File Share once these roles are assigned.

Here's the command line I try to use to re-encrypt:

pgpnetshare --reencrypt-delta --recipient-owner "ADMIN GROUP KEYID" --recipient-operator "MY KEY ID" --recipient "USER GROUP KEY ID" --signer "MY KEY ID" --passphrase "MY PASSPHRASE" --universal-server "pgpserver.mycompany.com""C:\encrypted_file_share_folder"

I get the error:

Error: You are attempting to manage a File Share Encryption-protected file or folder, but you do not have rights to do so.

Which leads me to believe that the command line doesn't check to see if I'm on the "Admin Group" users list. Note that the Windows UI does check this and I'm able to re-encrypt the folder through the Windows UI, just not the command line.

I'm able to use the above re-encrypt command line if my account is in the "Admin Role", but not the "Group Admin Role". And after I issue the command, I can again, no longer manage the folder with the command line. Everything still works as expected through the Windows UI.

Is there a command line option that I'm missing or is this a limitation of using the command line tool?

I'd really love to have a solution so I could create a script to re-encryption at regular intervals without losing the ability to have multiple people manage the group.

Thanks in advance for any help.

1402081359

↧

Symantec Encryption Desktop as a replacement for TrueCrypt

June 4, 2014, 3:58 pm

≫ Next: SEP Licensing Page SMB v. Enterprise

≪ Previous: Pgpnetshare.exe Command line functionality not looking up group users when re-encrypting with a group as the admin role.

I need a solution

Hello everyone,

With the questions surrounding TrueCrypt we are looking at replacements and I found Symantec Encryption Desktop. I have downloaded the trial but can't seem to get it work like TrueCrypt did. I'm hoping I can explain how we used TrueCrypt and find out if it's possible to do the same with the Symantec solution.

Using TrueCrypt we encrypted a 1 TB external USB hard drive. We then connected this hard drive to a server in a secure location and shared it on our network. On the computer we used to move files to the external hard drive, we mapped a network drive, fired up TrueCrypt and mounted that disk and we could access the drive.

With Symantec I can encrypt an external hard drive but so far I have not found a way of connecting to this drive when it is connected to another computer and shared.

Any insight would be appreciated.

↧

SEP Licensing Page SMB v. Enterprise

June 6, 2014, 11:28 am

≫ Next: How to add a variable to disclaimer?

≪ Previous: Symantec Encryption Desktop as a replacement for TrueCrypt

I need a solution

Does the SMB version of SEP have a "Licensing" page in the Admin tab of the console?

How can I check if the version I'm in is SMB or Enterprise?

I have a customer who is trying to find licensing information that the previous admin left behind.

Thanks

↧

How to add a variable to disclaimer?

June 6, 2014, 5:39 pm

≫ Next: SEPM upgradation

≪ Previous: SEP Licensing Page SMB v. Enterprise

I need a solution

Hello,

When Secure Mail Gateway provides disclaimers to outgoing messages, is there any way to add a variable like ($sender$ or %username%) to disclaimers in order to have the actual sender address inserted into the text of the disclaimer?

Thank you in advance

↧

SEPM upgradation

June 2, 2014, 4:54 am

≫ Next: SEPM Server Backup & Recovery - Best practices!

≪ Previous: How to add a variable to disclaimer?

I need a solution

I have a older sepm version 11 installed and now management has decided to installed latest sepm 12.1.4 on new server with same ip and host name.

so kindly let me know the rules for the succesfull upgradation.

1) i have taken backup of sepm.

2) I have backup of sylink.xml

3) i have backup of IP addrss and host name

4) I have backup of server certificate key.

Kindly let me know whther i can directly install sepm 12.1.4 on new server or i need to install sepm 11 and then i should upgrade it with latest sepm 12.1.4

↧

SEPM Server Backup & Recovery - Best practices!

June 7, 2014, 6:22 am

≫ Next: protection for GameOver Zeus and CryptoLocker malware families.

≪ Previous: SEPM upgradation

I need a solution

Most efficient and easy way to take SEPM server backup / recovery?

Is VM snapshot level backup supported?

regards..

↧

protection for GameOver Zeus and CryptoLocker malware families.

June 3, 2014, 8:15 am

≫ Next: FileReader restarts excessively

≪ Previous: SEPM Server Backup & Recovery - Best practices!

I need a solution

is there any protection for GameOver Zeus and CryptoLocker malware from symantec end point

↧

FileReader restarts excessively

June 8, 2014, 5:39 am

≫ Next: how to reset admin password on SEPM 12.1.x?

≪ Previous: protection for GameOver Zeus and CryptoLocker malware families.

I need a solution

Dears,

Hi,

I faced with below message in Server status and my server remains in starting, I wonder if you could helpme to resolve this issue.

I have attached the FileReader.log

Message
Code	1007
Summary	FileReader restarts excessively
Detail	Process FileReader has restarted 4 times during last 51 minutes.

FileReader0.rar

↧

how to reset admin password on SEPM 12.1.x?

June 2, 2014, 11:53 pm

≫ Next: DLP Integeration with TITUS

≪ Previous: FileReader restarts excessively

I need a solution

How to reset admin password on SEPM?

Admin credentials with which SEPM was installed and configured have been lost as previous admin has resigned.

Thanks

1402231959

↧

DLP Integeration with TITUS

June 5, 2014, 5:06 am

≫ Next: DLP v12 Agent Package and Memory utlization information

≪ Previous: how to reset admin password on SEPM 12.1.x?

I need a solution

Hello all , I want to know that can I integerate DLP with Titus ?

How can I do this integeration ? please tell me step by step . Waiting for your responses. Regards

↧

DLP v12 Agent Package and Memory utlization information

May 13, 2014, 11:09 pm

≫ Next: Error enable Permium AntiSpam on Mail Security for MS Exchange

≪ Previous: DLP Integeration with TITUS

I do not need a solution (just sharing information)

Hi Symantec experts,

Can I get the size of DLP Agent package of version 12 and also wanted to know the normal memory utilization or the space it will occupy on disk after the installation of the package.

Please revert the same ASAP.

↧

Error enable Permium AntiSpam on Mail Security for MS Exchange

June 6, 2014, 1:11 am

≫ Next: Create internal user

≪ Previous: DLP v12 Agent Package and Memory utlization information

I need a solution

Hi All

I got an error on enable the Permium antiSpam on Mail Securit for MS Exchange

The exchange is on DMZ, so that it can't be touch the internet and it get the definition update by LUA

but I find that the Antispam need to go to https:aztec.briightmail.com

Anyone help

Thank

Best regards and thanks

Cyril

↧

Create internal user

June 8, 2014, 2:20 pm

≫ Next: Norotn Internet Security did not recognize Trojan.Zbot

≪ Previous: Error enable Permium AntiSpam on Mail Security for MS Exchange

I need a solution

Hello,

I need to import already existing MAK. It works fine with following command:

pgp --import-mak <key.asc> --usp-server <keyserver> --auth-username <username> --auth-passphrase <password>

But when there is no such user, I need to create user account prior to import. With the following command:

pgp --create-consumer --usp-server <keyserver> --name <username>

how to specify a passphrase for newly created account so I can use it with --import-mak?

Thanks,

Anton

↧

Norotn Internet Security did not recognize Trojan.Zbot

June 8, 2014, 1:39 pm

≫ Next: Initializing database failed.

≪ Previous: Create internal user

I need a solution

I have a customer running Norton Internet Security 2014. They were informed by the local ISP that a government agency had alerted the ISP that this customer was infected by a dangerous piece of malware, "Game Over Zeus." My customer called me in a panic. The first thing I did was to run a full system scan with Norton Internet Security...the end result showing only 41 tracking cookies! ...no significant malware. I then installed Malwarebytes whose scan found 13 instances of Trojan.gen and Trojan.Zbot and removed the malware. I always tell my customers that Norton Internet Security is number one for blocking and removing malware. I am now concerned about how this infection could have slid past NIS. Can anyone enlighten me about this?

1402263180

↧

Initializing database failed.

June 9, 2014, 12:13 am

≫ Next: No connection to the Symentec EP service

≪ Previous: Norotn Internet Security did not recognize Trojan.Zbot

I need a solution

Before starting the installation process it is giving me this error and database connection is successful.

Error: SqlPlus command failed. The installation process will exit.

Thank you in advance.

Screen Shot 2014-06-08 at 4.58.59 PM.png

↧

No connection to the Symentec EP service

June 9, 2014, 5:57 am

≫ Next: problem in updating sep via Sylink.xml

≪ Previous: Initializing database failed.

I need a solution

Good morning, I am getting this on a server and I have removed and reinstalled SEP. What could be caused this? The server goes offline and stops reporting to the SEPM, the green dot is yellow. Any idea what can be the causeof this?

↧