Endpoint Protection

Dear All,

Can anyone share the Symantec Enpoint protection 12.1 best practices for NAS and SAN storages ??

Regards,

Irteza 

Check this thread

http://www.symantec.com/connect/forums/symantec-endpoint-protection-netbackup-7103

Attachment(s)

SizingSizabilityBestPractices_SEP12.1.pdf   910 KB 1 version

Hello,

For many reasons, including the typical large (terabytes) capacity of NAS, the Symantec Scan Engine is the right product to secure these machines.

The use of the Symantec AntiVirus or Symantec Endpoint client to scan drives on a NAS device is not recommended and is not supported.

I would recommend - Symantec Protection Engine for Network Attached Storage

Symantec Protection Engine for Network Attached Storage provides scalable, high-performance threat detection services. These services protect valuable data stored on network attached storage (NAS) devices, providing increased scanning performance and improved detection capabilities for protection against multi-blended threats. Protection Engine includes Symantec's industry-leading malware protection for fast, scalable, and reliable content scanning services. These help organizations protect their data and storage systems against the ever-growing malware threat landscape. Malware definitions and engines are updated automatically with no interruption in malware scanning using Symantec LiveUpdate. Definitions can also be distributed centrally to multiple deployments utilizing the included Symantec LiveUpdate Administrator application.

Check this Thread:

different between Symantec Endpoint protection and Symantec Scan Engine

https://www-secure.symantec.com/connect/forums/different-between-symantec-endpoint-protection-and-symantec-scan-engine

https://www-secure.symantec.com/connect/forums/symantec-endpoint-client-symantec-av-nas-supported

Hope that helps!!

The recommended software for scanning the NAS Storages would be the Symantec SCan Engine for NAS:

http://www.symantec.com/protection-engine-network-attached-storage

It is software specifically designed for that purpose:

Symantec Protection Engine for Network Attached Storage provides scalable, high-performance threat detection services. These services protect valuable data stored on network attached storage (NAS) devices, providing increased scanning performance and improved detection capabilities for protection against multi-blended threats. Protection Engine includes Symantec's industry-leading malware protection for fast, scalable, and reliable content scanning services. These help organizations protect their data and storage systems against the ever-growing malware threat landscape. Malware definitions and engines are updated automatically with no interruption in malware scanning using Symantec LiveUpdate. Definitions can also be distributed centrally to multiple deployments utilizing the included Symantec LiveUpdate Administrator application.

Thread about the differences:

https://www-secure.symantec.com/connect/forums/different-between-symantec-endpoint-protection-and-symantec-scan-engine

NAS

NAS doesn't have a Windows OS

NAS will always be considered at Network Drive,with SEP you can enable SCAN network drive, it will scan the mapped portion of the NAS but will not take any action on the file on NAS, it will prevent the file copying to the client machine.

For NAS you SPE (a.k.a Symantec Antivirus for NAS) which a different product all together, you cannot run a scheduled scan on disk with terabytes of data, also SAV for NAS does multi threading i.e. it will scan many files being accessed simultaneuosly without impacting the performance of NAS

SAN

SAN is considered as Local Fixed Drive and so there is nothing different between a SAN and HDD.

For reducing DISK I/O on SAN you can look for Virtualization best practice using SEP 12.1. 

http://www.symantec.com/business/support/index?page=content&id=TECH173650