App Review Symantec Endpoint Protection

[Parkinsond]

So in the SEP installation process, can you refuse to install this extension? How stupid of me not to pay attention to that the day I installed SEP.

No, it is not available during installation.
After installation, change it from settings and restart PC.

 

[Vitali Ortzi]

Is Symantec Endpoint Protection good web protection? Does it use the Symantec Browser Protection extension?

It does come with one and there is a standalone Symantec extension in the store as well but personally I will just use osprey instead as it has Symantec and other great providers

 

[Parkinsond]

It does come with one and there is a standalone Symantec extension in the store as well but personally I will just use osprey instead

Indeed Osprey is a better choice; it included Symantec plus several other vendors; the most comprehensive security extension I ever tried.

 

[Vitali Ortzi]

Downloaded the most recent 7 script samples (vbs, vbe, js, ps1) from MB.
On-demand scan by SEP detected 3, K 2, and each of MD, Avast-AVG, ESET 1, nothing by B.
Signatures are good; its relatively weak spot is behavioral detection.
Did not try to launch, but I bet K and B will detect most of them post-execution.

Behavior blocker in Symantec is one of the best in the industry
Actually that's why Norton power eraser is so effective as it's still using Symantec technology

 

[Parkinsond]

Behavior blocker in Symantec is one of the best in the industry
Actually that's why Norton power eraser is so effective as it's still using Symantec technology

The third best after K and B.
Is not NPE an on-demand scanner relying on signatures?

 

[Parkinsond]

Behavior blocker in Symantec is one of the best in the industry
Actually that's why Norton power eraser is so effective as it's still using Symantec technology

https://chatgpt.com/c/68348d7d-9d14-8002-8b4f-c96d92e58d39

 

[Vitali Ortzi]

View attachment 288789

https://chatgpt.com/c/68348d7d-9d14-8002-8b4f-c96d92e58d39

The technologies in Norton power eraser are inside blood hound and sonar too and I don't think you can consider npe as a static scanner

 

[Vitali Ortzi]

The third best after K and B.
Is not NPE an on-demand scanner relying on signatures?

It doesn't only rely on signatures just like Kaspersky virus removal tool , hitman etc

 

[Parkinsond]

It doesn't only rely on signatures just like Kaspersky virus removal tool , hitman etc

How can NPE use behavioral analysis without running threats?

 

[Kongo]

How can NPE use behavioral analysis without running threats?

It doesnt use behavioural analysis. You already shared that it uses repuation analysis and heuristics.

 

[Parkinsond]

So that means you can't easily remove the extension from your browser once it's installed, let alone allow a page blocked by SEP? And the browser also says it's managed by an organization, is that it?

I prefer to ditch the extension built-in with SEP by unselecting browser protection from settings, and to replace it by the more flexible one from chrome store; both afford the same protection.

After further reading, no, both extensions are not the same.
Chrome extension just use reputation database.
The one installed with SEP has in addtion to reputation check, detection of malicious scripts inside browser using IPS definitions.

I apologize for not providing the most accurate data; I am not related to tech field, just a fan.

Expected behavior of SEP/SES Browser Intrusion Prevention

knowledge.broadcom.com

 

[Parkinsond]

You can change it to the language that contains these unrecognised characters (like Russian, Bulgarian for Cyrillic) or you can enable the UTF8 support.

If blocking inbound traffic really didn’t affect any applications then it wasn’t really blocked. There were exceptions. Blocking all inbound traffic is the same as not paying your broadband bill/cancelling the service

Your trick has worked; all my gratitude

 

[Trident]

Your trick has worked; all my gratitude

Good to hear that

 

[Capiche]

Just like you I run it on every machine and if you use the ips , firewall only it's insanely light


Not that the other components aren't good but personally I prefer to use eset as an av as it's lighter , has less false positives

may i ask you something if you dont mind, which ones should i select for ips and firewall, standard client or embedded client ? thanks alot buddy

 

[Vitali Ortzi]

may i ask you something if you dont mind, which ones should i select for ips and firewall, standard client or embedded client ? thanks alot buddy

Technically It matters only if you install the av components but I usually select embedded for that config just in case

 

[Capiche]

Technically It matters only if you install the av components but I usually select embedded for that config just in case

thanks for the quick reply Vitali Ortzi, so i have avast free av and i only want to install the Symantec ips and firewall only, is that ok if i do that and which ones should i install ?

 

[Vitali Ortzi]

thanks for the quick reply Vitali Ortzi, so i have avast free av and i only want to install the Symantec ips and firewall only, is that ok if i do that and which ones should i install ?

Select only the firewall and ips module and I assume it should work although haven't tried with avast

 

[Capiche]

Select only the firewall and ips module and I assume it should work although haven't tried with avast

thanks and i have 1 more question please, can you show me how to install the ips and firerwall only in the custom setting of Symantec ?

 

[Capiche]

Select only the firewall and ips module and I assume it should work although haven't tried with avast

i got it and thanks for your help Vitali , you have a nice weekend