Endpoint Protection

Hello,

Trying to get my head around the SEP 12 protection technology because the names are so similar.

In the Implementation guide, there are few confusing instances of this:

pp 304

If you disable Insight lookups, Insight Lookup uses the latest definitions only to make decisions about files.

and another one

Download Insight, Insight Lookup, and SONAR use Insight lookups for threat detection

I'll really appreciate if anyone can explain in one or two sentences how Insight Lookup and Insight lookups are different. 

check if this helps

http://www.symantec.com/business/support/index?page=content&id=TECH169282

"Insight Lookup" and "Insight" are more-or-less the same thing. "Insight" is a group of technologies that add context (or reputation) to our scanning technology. "Insight Lookup" is part of the "Insight" family and is specifically responsible for looking up the reputation data. 

One way it was described to me is "Insight can be substituted with the word context"... So "Download Insight" gives you context about your downloads; "Insight Lookup" is responsible for looking up the context for files.

Finally, an English professor, would point out the difference between how Lookup and lookup is used... Insight Lookup is a noun (it's a thing) and lookup is a verb (it's something that is done). So you have SEP technologies (SONAR and Download Insight, for example) using Insight Lookup to lookup the context/reputation.

One way it was described to me is "Insight can be substituted with the word context"... So "Download Insight" gives you context about your downloads; "Insight Lookup" is responsible for looking up the context for files.

That is so confusing. Why not just call it Insight?

I'm sure lot of people new to SEP 12 probably think Download Insight, Insight Lookup, and Insight are different things, when in fact, it is being referred to differently, depending on the context.

Finally, an English professor, would point out the difference between how Lookup and lookup is used... Insight Lookup is a noun (it's a thing) and lookup is a verb (it's something that is done). So you have SEP technologies (SONAR and Download Insight, for example) using Insight Lookup to lookup the context/reputation.

This is helpful as well

I agree... it is confusing. I would have done it differently, but they didn't ask me. :)

试图理解 SEP 12 保护技术，因为名字是如此相似。

在实施指南中，有几个令人困惑的例子：

第304 页

如果您禁用 Insight Lookups，Insight Looup 只使用最新的定义对文件作出决定。

另一个

下载的 Insight、 Insight Looup, SONAR将使用Insight Lookups 进行威胁检测

如果任何人可以用一两个句子解释 Insight Lookup 和 Insight Lookups 的不同，我会很感激。

解决答案

"Insight Lookup"和"Insight"基本上是同一件事。"Insight" 是一组技术，向我们的扫描技术中添加使用环景（或声誉） 。"Insight Lookup"是"Insight"系列的一部分，专门负责翻查声誉数据。

另一种解释是"Insight 可以被context取代"… …所以"下载Insight"指的是有关您的下载的使用环境 ；"Insight Lookup"则负责查找文件的使用环境。

最后，英语教授可能会指出"Insight Lookup"和"Insight"区别 … …"Insight Lookup"是一个名词（这是一件事）。 查找是动词 （指的是完成的事情）。所以你的 SEP 技术 （例如 SONAR和下载Insight） 使用Insight Lookup 查找环境/声誉。