Hi,
We, have recently acquired the /24 subnet of IP address (216.170.117.0 - 216.170.117.255). It appeared that all of IP addresses from this range were blacklisted because of: "The host has been observed sending spam in a format that is similar to snow shoe spamming techniques."
How can I clean up the reputation of this subnet of IPs?
Thank you,
Mykola Denysiuk,
System administrator
Hello,
Is there more information from Symantec regading those vulnerabilities mentioned below or it is just the Windows patching that has to be done and no further actions required from SEP side?:
https://www.symantec.com/security-center/vulnerabilities/writeup/111370?om_rssid=sr-advisories
https://www.symantec.com/security-center/vulnerabilities/writeup/111368
https://www.symantec.com/security-center/vulnerabilities/writeup/111369
https://www.symantec.com/security-center/vulnerabilities/writeup/111372
Thanks
Hi Folks,
I interact with the BC using the REST API.
I get the policy content, change it a bit and successfully uploaded it back. Unfortunately, the updated policy is not automatically saved. I need to log in to the UI and do it from there. Any idea if there is an API call that save the policy?
Regards,
Slavi
We have a bit of an odd request. Is it possible to run Symantec Endpoint Protection on all of our computers to manage our firewalls but remove the AV portion of SEP? We are aiming to test using Windows Defender for AV but keep SEP for firewall protection.
The tech article TECH257100 offer an SQL script to correct the problem and we are trying to figure out how to execute it.
It is not like a regular DB SQL script, it modify IT analytic
does someone know who to execute it ?
https://support.symantec.com/us/en/article.tech257100.html
Thanks
Dany
We have gotten a few questions in re: Client Mgmt. Suite and just wanted to share this with you in case you may have questions as well.
Client Management Suite and the other products in the Endpoint Management portfolio are alive and well positioned for success as part of Broadcom. In fact, the Endpoint Management products are exactly the type of established and sustainable business that Broadcom cultivates.
We are currently working on some infrastructure and tools migration projects that are required as part of the Broadcom acquisition, but are simultaneously making progress on the next release of Client Management Suite. It's a little too early to provide any projections on when we expect the next release to ship, but we understand that there is a pressing need to support new versions of operating systems already supported by the product. In addition, we also have a long list of product enhancements that would provide added value to our customers.
Of course we cannot share a specific roadmap, but felt it important that customers know the focus Endpoint Management products are receiving.
Thanks so much,
Amy J
Hi,
DLP in version 14.6 linked to the active directory, when entering as a domain user if it generates an incident and performs the assigned blocking action, however, when entering as a local user to the endpoint, it does not generate an incident and much less the response action.
Is there a problem with this version ?, or is it necessary to perform some extra configuration?
Greetings.
I want to test this feature. Cannot find any download link.
Hi,
we have been experiencing problems with our mail server for a while, as it has been blacklisted by Symantec.
We are constantly checking our IP address (94.76.192.246) and it is considered with good reputation everywhere, except on Symantec.
Our customers keep complaining that their clients don't receive their emails and we don't understand why our server keeps being blacklisted.
Every day we use the IP reputation investigation tool, but everytime we check it again is blacklisted again and it doesn't give us any reason.
Please help us removing our IP address from your blacklist or give us any hint on how to fix this problem.
Thank you in advance.
Andrea Crescimone
After some discussions with Symantec messaging teams, our business partners who are using Symantec Message Labs as their message filtering service have reported that the sender “Oaknorth.com” is blacklisted by Symantec Message Labs. This is resulting in some of the emails from our domain not getting delivered in the business partner environment.This is a whitelisting request to enable oaknorth.com and oaknorth.ai senders in your message filtering service. If you need any information, please let me know..
Hello, I have a Windows Server 2012 R2 server with GSS 3.3 installed. Client computer OS is Windows 10, Disk Management looks like this:
Create image command: -CLONE,MODE=CREATE,SRC=2,DST=%IMAGE_FILENAME% -SURE -IB -SPLIT=0 -Z3
Restore command: -CLONE,MODE=PRESTORE,SRC=%IMAGE_FILENAME%:4,DST=2:4 -sure
The create image job works fine. Restore image job also works for the first time but failed for the second time, job status displayed "Unable to boot to Windows automation".
I searched a little bit in this Forum and found similiar posts, e.g.
https://www.symantec.com/connect/forums/add-automa...
https://www.symantec.com/connect/forums/unable-boo...
For my situation, if the default boot setting is not correct initially, how the restore image job success for the first time? I am wondering, besides of checking boot order, is there any place I can check? Please advise, thank you in advance.
Hi
How to change the update frequency for policy update between ict server and ict agent
Thanks
I need a workaround for Symantec DCS:SA agent for fedora linux v. 22
Hi,
We are testing SSL Inspection on UAT right know and I have question related to certificate which proxy send during SSl proccess. In default proxy send only emulate certificate is there any way to change that to send all Chain of certificate ? In this way we would not have to distribute certificate of proxy on all workstations because Sub CA whch certificate is signed na Root CA is trusted for users/coumputer in a AD domain.
I'll be very grateful for your help
Pawel
Good Morning,
I have one big problem, my Windows Servers 2008 are constantly restarting.
We dump and diagnose that de problem is in the ccSetx64.sys file.
The problem is intermittent, follow the dump and version SEP.
The problem does not occur on Windows 2012.
Hi All,
Server 2019 running GSS 3.3 RU2
Problems after imaging
Any images that were created before the new server rebuild (last week of december) can be used to image a PC and it goes through the config, joins domain, completes tasks and works
Any new images (created since the rebuild - last 2 weeks) the image will create with no issues - but when pushed to any other PC, it images fine but stops at configuration point with no error (windows 10 1809)
When logging in locally it has a 169 internal network address
Checked drivers, uninstall, reinstall still no ip address, no issues in device manager, card reported as working (its as if it cant connect to DHCP server)
Tried using exisiting image create jobs and recreating the create job , tried pushing and pulling from different PCs but outcome is always the same - 169 address
Ive chekced everything I can think of and tried everything
Aside from reinstalling everything again on the server I was wondering if any body had any ideas ?
I have checked in the temp folder on express on 2 servers and only difference I cam see when comparing cfg files is a line
not working server line
SetIPInfo=True
Route0=0.0.0.0 ,0.0.0.0 ,10.110.1.250 , ,1, ,0,0
Static-Route-Count=1
working server line
SetIPInfo=True
Static-Route-Count=0
If this is the cuase im not sure where to make the changes to it?
We have 4 other servers on other sites, all identical and all working
Thanks
Hi everyone,
Do I need to know what memory and CPU resources a Network Discover scan consumes, on the servers to be scanned?
regards.
Hi,
Where can I find a link to download the sizing tool
Is there any way to chain multiple services through SSLV800 appliance?
Need to know if this device can support decryption of traffic once and feeding it to multiple inline devices?.
Hi everyone,
our SEP detects a download insight when O365 Pro Plus tries to get its updates.
The tmp file name varies every time. We are getting Helpdesk calls about it and i want them to stop.
After checking 5 clients i'm sure that this file relates to the Office Updates (Semi Annual) as there is a log file from O365 ProPlus with the same timestamp.
When will these files are trustworthy?
Best regards
Stephan