Endpoint Protection

 View Only
Expand all | Collapse all

SEP - network threat protection

Migration User

Migration UserMay 06, 2009 06:50 PM

  • 1.  SEP - network threat protection

    Posted May 06, 2009 09:14 AM
    Hello,

    I have a problem to play all my Winamp Radio channels when the network protection feature is enabled. It seems that sky.fm channels with AAC and mp3 are blocked and the soma.fm channels can be played.I allow winamp on all ports and servers in both directions, but this dos not help, so I always have to disable the network protection, which is not the best solution.

    Can someone help me to develop a sutiable rule that enables the playback.

    Many thanks

    Markus


  • 2.  RE: SEP - network threat protection

    Posted May 06, 2009 10:13 AM
    Hi,

           The Network Threat Protection feature is similar to that of a Firewall. It blocks both incoming and outgoing traffic. You mentioned that you are able to play "soma.fm channels " when the Network Threat Protection feature is ON however you are not able to play "sky.fm channels with AAC and mp3". If you already have a Firewall in place this feature(Network Threat Protection ) can be turned OFF.

    Please let us know the following :-

    Version of SEP installed :

    Whether its a Managed or an Unmanaged Client :

    In the CD1 folder go to the documentation folder and go through the administration_guide.pdf file which would further assist you in creating a new Firewall rule in case its a managed client.

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008060208101648

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009012915443648

    In case its an unmanaged Client please follow the link below

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008082616375748


  • 3.  RE: SEP - network threat protection

    Posted May 06, 2009 11:17 AM
    Hello Sandip C Sali,

    thanks for the fast response.

    Operationg System: Windows XP Pro SP3 with latest updates.
    Winamp latest Version
    No additional firewall except the Windows integrated firewall is used.

    SEP Version: 11.0.4014.26
    Its a managed client

    I created a rule that allows Winamp everything, but this rule does not work. The major differance between Sky.fm and Soma.fm is, that Sky.fm offers a premium service. That may result in some differnet traffic, may be a  cookie-saving, but I'm not sure, since i never recognice somethink like that. I do not use that premium service of sky.fm.

    Kind regards

    Markus



  • 4.  RE: SEP - network threat protection

    Posted May 06, 2009 05:45 PM
    @MKR: Will the application work properly if the firewall is disabled?


  • 5.  RE: SEP - network threat protection

    Posted May 06, 2009 06:50 PM

    Have you read the first post?



  • 6.  RE: SEP - network threat protection

    Posted May 06, 2009 07:57 PM
    Yes, I read the first post. To my understanding, what he did was open software specific ports....then sandip_sali said that "The Network Threat Protection feature is similar to that of a Firewall. It blocks both incoming and outgoing traffic." -doh!


  • 7.  RE: SEP - network threat protection

    Posted May 07, 2009 02:38 AM
    Hello to all,

    Next to the network threat protection only the windows XP integrated Firewall is enabled. I do not have an extra firewall. With enabled Windows Firewall everthing works fine and if I disable that firewall winamp works also fine.As long as in both cases the network thread protection is disabled.

    Before we got that SEP we used Symantec Corporate Antivirus also managed. This older Applikation didn't have a Network Thread protektion and therefore everything was fine as well.

    Now, since SEP with it's network thread protection it dosend work anymore. Personaly i like this new feature, because it seems more powerful than the standard windows firewall, but I is not so easy to use as every other personal firewall I used up to now.

    Since I googled a little bevor I post hear I found out, that symantec has some protection against shoutcast Severs implemented with Update 11 and 95. Simply google for "symantec endpoint protection Shoutcast".

    I'm not quit sure if this may is the reason for my little problem.

    Kind regards

    Markus



  • 8.  RE: SEP - network threat protection

    Posted May 07, 2009 03:03 AM
     I guess we need to know ports of shoutcast servers, then we can add it to the sepm fw to allow.


  • 9.  RE: SEP - network threat protection

    Posted May 08, 2009 01:53 AM
    If this is the only solution than I pass. Besause every radiochannel has selveral servers and every quality level differend ports. I that case I deactivate the NTP function or deinstall the entire program and search for a new one.


  • 10.  RE: SEP - network threat protection

    Posted May 26, 2009 09:39 AM
    Hi,

    We have released the latest version of endpoint i.e. MR4 MP2. You can try upgrading and let us know the status.



  • 11.  RE: SEP - network threat protection

    Posted May 27, 2009 03:56 AM
    Hi mkr, do the servers have a same domain name? like server1.sky.fm, server2.sky.fm, then you should only allow sky.fm with no problems.


  • 12.  RE: SEP - network threat protection

    Posted May 27, 2009 04:41 AM
    "I allow winamp on all ports and servers in both directions, but this dos not help"
    Did you did this on the SEP Firewall.If yes then I would also like you to change one SEP client to client control and read the Network  Traffic logs it will tell you what exactly is getting blocked.
    Once we find that solution would be simple then.


  • 13.  RE: SEP - network threat protection

    Posted Oct 09, 2009 07:29 AM
    Dear Sir

       This is varinder from ludhiana plz tell me that how i can view my symantec endpoint server from another machine in network through explore you tell me but i forget plz sir tell


    thankx



    Varinder Singh

    9872685606