[DISCUSSION] Symantec Endpoint Protection

Discussion in 'Application Software' started by CHEF-KOCH, Dec 14, 2013.

  1. Feindsender64.3

    Feindsender64.3 MDL Novice

    May 25, 2017
    1
    0
    0
    Hello everyone, wanted to share my experience so far here.

    I've installed 14x (Client) on Windows (16299.15) as replacement to Mcafee Plus and it's working just fine, no issues at all. The highlight here is that he runs more smooth with 25% on cpu load at it's peak of scanning (with agressive mode and performance toward the scan instead of balance, can't even tell if he's running on the background. While Mcafee Plus had my cpu around 40% or way more on idle, and it gets even worse when scanning. :huh:.



    Yes, i checked that and it was happening here.
     
  2. cowbawx

    cowbawx MDL Junior Member

    Aug 13, 2009
    59
    20
    0
    That's because 14.0.1 will officially support the Fall Creator's Update. To be released today. However, the batch file, at the time of this writing has yet to work, if it is correct.
     
  3. jcvo

    jcvo MDL Junior Member

    Aug 30, 2011
    54
    35
    0
    14.0.1 (14 RU1) 14.0.3752.1000 October 12, 2017
    which is the candena of the correct link
     
  4. cowbawx

    cowbawx MDL Junior Member

    Aug 13, 2009
    59
    20
    0
    adamli9* Symantec Employee
    This comment has been moved to a
    Solution



    They should be on FileConnect tomorrow.
     
  5. ericgl

    ericgl MDL Senior Member

    Mar 10, 2011
    251
    189
    10
  6. LostED

    LostED SVF Patch Lover

    Jul 30, 2009
    7,155
    21,099
    240
    Code:
       File: Symantec_Endpoint_Protection_14.0.1_Win64-bit_Client_EN.exe
     CRC-32: 94d04505
        MD5: 6621e2949a76654c47b2d99c11c9354c
      SHA-1: 6078908c6f460fd47227ddc7e9b21d54c7bacfe8
    SHA-256: 404a3f5f5d735294c179425b19e00260fdc777879b61f71e49344347d0e340d1
    
       File: Symantec_Endpoint_Protection_14.0.1_Win32-bit_Client_EN.exe
     CRC-32: bb4406d7
        MD5: ab28f9e651f604433e4ced57c718a869
      SHA-1: f259bc65bffaa28d9550ec52302393651d49e3c0
    SHA-256: c088fe3e17ebe87499712ce5b1f8ea3f5c39e25705c6501c09c3db52a924337e
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. cowbawx

    cowbawx MDL Junior Member

    Aug 13, 2009
    59
    20
    0
    Anyone have filename of All_Clients? Full? etc?
     
  8. jmdomini

    jmdomini MDL Novice

    Jul 14, 2008
    12
    7
    0
  9. cowbawx

    cowbawx MDL Junior Member

    Aug 13, 2009
    59
    20
    0
    Thanks they all work except part2 tools and sepm
     
  10. cowbawx

    cowbawx MDL Junior Member

    Aug 13, 2009
    59
    20
    0
    Nevermind all is good. = )
     
  11. yomoma2

    yomoma2 MDL Senior Member

    Feb 27, 2010
    362
    120
    10
    That's unexpected.
     
  12. protogen

    protogen MDL Novice

    Jul 2, 2016
    1
    0
    0
    Confirmed.

    I just did a fresh install of Windows 10.0.16299.15 immediately followed by SEP 14.0 RU1 (14.0.3752.1000). Both Windows Defender Anti-Virus and Windows Defender Firewall continue to operate in parallel with SEP.

    I used the following to manually:
    1. Disable Windows Defender Anti-Virus service
    2. Turn off Windows Defender Firewall
    3. Disable Windows Defender Security Center service

    Code:
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
    "EnableFirewall"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
    "EnableFirewall"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SecurityHealthService]
    "Start"=dword:00000004
    
     
  13. yomoma2

    yomoma2 MDL Senior Member

    Feb 27, 2010
    362
    120
    10
    #274 yomoma2, Oct 28, 2017
    Last edited: Oct 28, 2017
    I think this behavior in >16299.15 is on purpose. It has to do with the windows advanced sharing settings. If on a private or public network you disable network browsing or file sharing, that option will be applied via windows defender firewall (applies variations of a rule set for those ports) so that firewall will be automatically enabled even if disabled previously, or if another 3rd party firewall is currently running. If you disable windows firewall for both types of networks via GUI, those network options will revert to enabled* (because they rely on the presence of the defender firewall, and activate it).

    So instead of using the advanced sharing settings to block windows network browsing or sharing while keeping the Windows Defender Firewall disabled, you'll have to do it on SEP or any other 3rd party firewall you use.

    *except if you force disable the Windows Defender Firewall via registry or policy, but then when you set network browsing or file sharing to disabled (via advanced sharing settings), it won't be applied as it relies on the OS firewall rules.
     
  14. ahmadkh

    ahmadkh MDL Junior Member

    Oct 24, 2017
    51
    40
    0
    thankeyou is a good
     
  15. Windows7FTW

    Windows7FTW MDL Novice

    Jan 27, 2017
    3
    1
    0
    need checksum for this installer:

    Symantec_Endpoint_Protection_12.1.6_MP9_Full_Installation_EN.exe
     
  16. dadeextreme

    dadeextreme MDL Novice

    Oct 18, 2017
    4
    0
    0
    Hi,
    does anyone know the direct link to the latest version in italian?
    Symantec Endpoint Protection 14.0.1 All Clients IT
    thank's
     
  17. LostED

    LostED SVF Patch Lover

    Jul 30, 2009
    7,155
    21,099
    240
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...