Endpoint Protection

 View Only
  • 1.  Disable Symantec Endpoint Network Threat Protection

    Posted Nov 25, 2009 09:48 PM
    I have symantec endpoint protection 11.0 installed on my machine (OS Windows XP SP3).

    I have created web application in .Net 2.0 Framework and add it to local IIS. When ever I type http://localhost from my machine, I can view my web application.
    But same web application is not visible from other machine when I try ( http://mymachinename), If I disable Network Threat Protection and try the same thing. I am able to view the my web application on different machine.

    I dont want to disable Network Threat Protection and also want to make my web application visible on the network.

    Please help me.!


  • 2.  RE: Disable Symantec Endpoint Network Threat Protection

    Broadcom Employee
    Posted Nov 25, 2009 10:20 PM
    check the firewall logs , this will state the rule that is blocking the traffic, edit the rule to allow the communication between server and client with port and protocol.


  • 3.  RE: Disable Symantec Endpoint Network Threat Protection

    Posted Nov 26, 2009 02:32 AM
    How to create a rule that applies to the entire SEP environment
    Main Policies Tab
    Firewall
    Rules
    Make a "Blank" rule
    Click the "Name" field to edit  the name of the rule to describe exactly which protocol the rule applies to
    Double Click the "Service" field
        Click "Add" in Service List window
        Select  the required protocol from the Protocol Drop Down
        Select  protocol you wish to manage from the Protocol Type drop down window (your network administrator should have this information)
        Select Protocol Direction
        Click "OK" to save your choices and get back to the Rules page
        Your new service is listed first and should already be "Checked" - if not, checkmark it
        Click "Okay" to get back the Rules page

    Note- You can use the "Host " field to fine tune which host IPs will use the rule and to what specific destination IP addresses they  can connect to

    How to create a Location Specific Non-Shared Firewall Policy rule that only applies to a specific Group
    Clients Tab
    Deselect "Inherit policies and settings from parent group "My Company"
    Select PoliciesTab in group window
    Select Location-specific Policies >> Click Firewall Policy
    Select "Create Non-Shared Policy From Copy
    Rules
    Make a "Blank" rule
    Click the "Name" field to edit  the name of the rule to describe exactly which protocol the rule applies to
    Double Click the "Service" field
        Click "Add" in Service List window
        Select the required protocol from the Protocol Drop Down
        Select  protocol you wish to manage from the Protocol Type drop down window (your network administrator should have this information)
        Select Protocol Direction
        Click "OK" to save your choices and get back to the Rules page
        Your new service is listed first and should already be "Checked" - if not, checkmark it
        Click "Okay" to get back the Rules page


  • 4.  RE: Disable Symantec Endpoint Network Threat Protection

    Posted Nov 26, 2009 03:32 AM
    Could you please tell what is the version of SEP you are using ?
    We have seen that with SEP RU5  ASP.net has some  issues when application and device control enabled.

    Also if you are not using SEP RU5 then  you can create and exception for asp.net in the firewall rule


  • 5.  RE: Disable Symantec Endpoint Network Threat Protection
    Best Answer

    Posted Nov 26, 2009 03:49 AM
    firewall1.JPGfirewall2.JPG

    firewall3.JPG



    firewall4.JPG