[27659] in resnet

home help back first fref pref prev next nref lref last post

Re: Symantec Endpoint Protection 12

daemon@ATHENA.MIT.EDU (Andy Voelker)
Fri May 11 08:29:56 2012

Content-Language: en-US
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Message-ID:  <B3C0241889401F4AB97A55E980BABBA001345A19D9A1@EXV01.wcu.edu>
Date:         Fri, 11 May 2012 08:28:05 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Andy Voelker <avoelker@email.wcu.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To:  <1919553253.3132904.1336599972486.JavaMail.rim@b12.c4.bise6.blackberry>

New discovery.  Download Insight doesn't have a problem with Blue Coat itself, just the way we package it.  I typically use PowerArchiver to make a self-extracting zip that will run a batch file.  The Proxy Client is an MSI that requires parameters to be fed into it at an admin level, hence the batch files for elevation and parameter feed.  It also has a problem with a network reset script I wrote to repair wireless connections.

Does anyone have a recommendation for a free package tool that will self-extract and run a file afterwards?  It looks like if I repackage everything I will be somewhat safe.

I still can't keep Download Insight from installing, which is ridiculous.  

-- Andy Voelker
Manager of Student Computing in the Technology Commons
WCU Staff Senator
Western Carolina University
Check the status of your IT requests at any time at http://help.wcu.edu/ !


-----Original Message-----
From: Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] On Behalf Of Brock, Adam
Sent: Wednesday, May 09, 2012 5:46 PM
To: RESNET-L@LISTSERV.ND.EDU
Subject: Re: Symantec Endpoint Protection 12

I had luck in the past getting false positive issues resolved by submitting them to SSC. Have you tried that?
Sent from my Brockberry.
________________________________
From: Andy Voelker <avoelker@email.wcu.edu>
Sender: Resnet Forum <RESNET-L@LISTSERV.ND.EDU>
Date: Wed, 9 May 2012 15:29:06 -0500
To: RESNET-L@LISTSERV.ND.EDU<RESNET-L@LISTSERV.ND.EDU>
ReplyTo: Resnet Forum <RESNET-L@LISTSERV.ND.EDU>
Subject: [RESNET-L] Symantec Endpoint Protection 12

Has anyone migrated to SEP 12?  If so, are you having problems with the "Download Insight" feature?  Here is our issue:

We have two Blue Coat Proxy SG appliances that are basically a malware filter.  We also install a Proxy client on all computers to enforce the same protection rules when the computer leaves our network (it is extremely effective, recent studies show that a student that lives off campus is over 3 times more likely to get a virus than students that live on campus).  The problem we are having with SEP 12 download insight is that it blocks the installation of the proxy client every time.  I can set it on the lowest level possible and it still blocks it.  The heuristics agent in it isn't intelligent enough to crack open the self-extracting ZIP and take a close look at the actual proxyclient.msi.  I can build an SEP package that doesn't include the download insight feature and disable it on the management server, but upon deployment it will show an error saying that download insight is not enabled.  Then it gives a handy little button called "Fix", which will download and install !
 the agent.  We obviously don't want to advise clients to ignore the error, and we love our proxy client, but it just seems like the two cannot co-exist.

We're going to try to contact Symantec, but hasn't proved useful in the past.  We may contact Blue Coat to see what they can do, but it isn't really their error in the first place.

Thoughts?  Solutions?  Thanks!

-- Andy Voelker
Manager of Student Computing in the Technology Commons WCU Staff Senator Western Carolina University Check the status of your IT requests at any time at http://help.wcu.edu/ !

___________________________________________________ You are subscribed to the ResNet-L mailing list.

To subscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.EDU/archives/resnet-l.html ___________________________________________________

___________________________________________________
You are subscribed to the ResNet-L mailing list.

To subscribe, unsubscribe or search the archives, go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________

___________________________________________________
You are subscribed to the ResNet-L mailing list.

To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________

home help back first fref pref prev next nref lref last post