Endpoint Protection

 View Only
  • 1.  SEPM12.1 - Antivirus

    Posted Dec 06, 2012 10:27 PM

    Do we have any planning in next version for user based policy. i.e currently if i need to block usb it is based on the computer and this is not a standard practise. can we apply user base policy in SEPM12?

    Regards,

    Dilip Patel



  • 2.  RE: SEPM12.1 - Antivirus

    Posted Dec 06, 2012 10:41 PM

    The better way is to set up all computers in "User Mode".

    Administration Guide for Symantec Endpoint Protection and Symantec Network Access
    > Section 1. Basic Administrative Tasks
    > Setting up your organizational structure
    > Understanding users and computers & Managing Users and Computers

    The policies are then set depending on the user that has logged into the machine

     

    Check this thread

    https://www-secure.symantec.com/connect/forums/sep-user-mode-can-you-explain-want-link-device-control-policy

    https://www-secure.symantec.com/connect/forums/configuring-usb

    https://www-secure.symantec.com/connect/forums/customizing-usb-storage-access-end-users-symantec-endpoint-protection



  • 3.  RE: SEPM12.1 - Antivirus

    Broadcom Employee
    Posted Dec 06, 2012 10:42 PM

    the existing version has the feature you looking for. you need to set user mode.



  • 4.  RE: SEPM12.1 - Antivirus

    Posted Dec 06, 2012 11:59 PM

    This feature already exists

    You can have the clients in User mode or Computer mode.

    Check this document for more Information.

     

    About user mode and computer mode

     

    http://www.symantec.com/business/support/index?page=content&id=HOWTO27008



  • 5.  RE: SEPM12.1 - Antivirus

    Posted Dec 07, 2012 12:53 AM

    Yes i agree above comments.

    this feature already exits in sepm

    Switching a client between user mode and computer mode

    http://www.symantec.com/docs/HOWTO80734

    About user mode and computer mode

     http://www.symantec.com/docs/HOWTO27008



  • 6.  RE: SEPM12.1 - Antivirus

    Posted Dec 07, 2012 03:12 AM

    please consider below two points:

    1. MY SEPM is not interagreted with AD

    2. we dont wont to apply user based policy on all computer or group.

    we dont wont to apply user based polcy on spacific group only.



  • 7.  RE: SEPM12.1 - Antivirus

    Posted Dec 07, 2012 03:13 AM

    please consider below two points:

    1. MY SEPM is not integrated with AD

    2. we don't wont to apply user based policy on all computer or group.

    we do not wont to apply user based policy on specific group only.

     



  • 8.  RE: SEPM12.1 - Antivirus

    Posted Dec 07, 2012 04:11 AM

    Assigning clients to groups before you install the client software

    http://www.symantec.com/business/support/index?page=content&id=HOWTO80732#v11094164



  • 9.  RE: SEPM12.1 - Antivirus
    Best Answer

    Posted Dec 07, 2012 06:56 AM

    As far as I understand, blocking USB through group policy will be better in your scenario. Because even though it is possible keeping some clients under user mode and some other under computer mode, it is not advisable.



  • 10.  RE: SEPM12.1 - Antivirus

    Posted Dec 20, 2012 08:31 PM

    HI Dilip,

    I hope your have received your answer ?

    Please don't forget to mark your thread solved with whatever answer helped you : )