Endpoint Protection

 View Only
  • 1.  What advantage is there with Outlook Auto-Protect in SEP vs. File System Auto-Protect

    Posted May 20, 2011 04:15 PM

    We have never used the outlook auto-protect feature in SAV or SEP and I was asked today about possibly enabling it. In the past we saw performance issues when it was enabled. The real question is what the outlook auto-protect does that my normal auto-protect does not???



  • 2.  RE: What advantage is there with Outlook Auto-Protect in SEP vs. File System Auto-Protect

    Posted May 20, 2011 04:24 PM

    I think this KB can answer you

    What is Auto-Protect ?

     

    But as far as I know Outlook Auto-Protect is not mandatory if you are having a good mail scanner attached to your mail server.



  • 3.  RE: What advantage is there with Outlook Auto-Protect in SEP vs. File System Auto-Protect

    Posted May 20, 2011 04:29 PM

    I know what each one does but I'm trying to determine why I would use outlook autoprotect instead of relying on file system auto protect.

    From what I can see all that Outlook autoprotect does is scan while the attachments are coming in and then have the ability to send a message if infected.

    From a protection standpoint I get the exact same by only using file system auto-protect when I go to open or copy the attachment.

    Am I missing something here?



  • 4.  RE: What advantage is there with Outlook Auto-Protect in SEP vs. File System Auto-Protect

    Posted May 20, 2011 05:45 PM

    Outlook email scanning proxies the incoming and outgoing email via Outlook (which seems obvious, but, there it is). Anything that comes in as an attachment would be scanned by Auto-Protect if accessed or modified (provided the Auto-Protect settings haven't been changed from the default).

    If you have an antivirus product scanning the Exchange stores (like Mail Security for Microsoft Exchange) then I doubt you'll need to use Outlook email scanning..

    sandra



  • 5.  RE: What advantage is there with Outlook Auto-Protect in SEP vs. File System Auto-Protect

    Trusted Advisor
    Posted May 23, 2011 06:10 AM

    Hello,

    "Thumbs Up!!!" to Sandra.

    More to Add in here.

    By Default, Exchange Folders are not scanned by Symantec Endpoint Protection. These Exchange Folders are Centrally Excluded from Scanning and that's inbuilt.

    Read Below Article:

    http://www.symantec.com/docs/TECH102400

    For Scanning of Exchange Folders, Symantec has a Different Product - Symantec Mail Security for Microsoft Exchange. http://www.symantec.com/business/mail-security-for-microsoft-exchange

    If you use Microsoft Outlook over MAPI or Microsoft Exchange client and you have Auto-Protect enabled for email, attachments are immediately downloaded to the computer that is running the email client. The attachments are scanned when the user opens the message. 

    File System Auto-Protect is a type of ongoing or background scan. Whenever you access, copy, save, move, open, or close a file, Symantec Endpoint Protection's File System Auto-Protect scans the file to ensure that a the file is not infected. It is important that you keep this enabled at all times, particularly if you are using Eudora.

    Internet E-Mail Auto-Protect is a type of ongoing or background scan. This scan will check incomming as well as outgoing email. If you use an email client other than Outlook and/or Outlook Express, you need to have this enabled.

    A Symantec Article worth reading:

    http://www.symantec.com/docs/TECH103140

    Again, Make sure you are carrying the Latest Symantec Endpoint Protection version 11.0.6300 for better Security.

    Read Article:

    http://www.symantec.com/docs/TECH131660

    http://www.symantec.com/docs/TECH103087

     

    Hope that Answers!!! :)