symantec endpoint protection tamper protection

Step 4: Enable the feature in Symantec Endpoint Protection Manager so that your clients know to look for and bypass the marked files when a scan runs from SEPM > Policies > Virus and Spyware Protection Policy > Miscellaneous> Virtual Images Run the Virtual Image Exception tool with the arguments : vietool.exe c: –generate –hash.Navigate to the directory where the Virtual Image Exception tool is installed.Open a command prompt with administrative privileges.From the Symantec Endpoint Protection Tools product disc, download the following file to the base image:/Virtualization/VirtualImageException/vietool.exe.Step 3: Run the Virtual Image Exception tool from the command line to mark the base image files Step 2: Ensure that the client’s quarantine is empty Step 1: On the base image, perform a full scan on all of the files to ensure that the files are clean Process for using the Virtual Image Exception tool on a base image It also improves CPU scanning process performance in your virtual desktop infrastructure The Virtual Image Exception tool lets your clients bypass the scanning of base image files for threats, which reduces the resource load on disk I/O. You can use the Virtual Image Exception tool on a base image before you build out your virtual machines. Run the Virtual Image Exception tool on the base image Confirm from the SEPM that the client is reporting.Reboot the VDI client after installation and update definition to latest.Copy the SEP agent for VDI clients to the GVM or the master image.Click Shared Insight Cache using VMware vShield.On the Miscellaneous page, click Shared Insight Cache.

In the Symantec Endpoint Protection Manager console, open the appropriate Virus and Spyware Protection policy and click Miscellaneous.Note: Perform a custom install and select vShield drivers under VMware device drivers/VMCI drivers, or perform a complete installĮnable Symantec Endpoint Protection clients to use a vShield-enabled Shared Insight Cache Use the VMware Tools installer to install the EPSEC driver.It also supports scheduled full and partial file scans initiated by the antivirus engine in the security virtual machine. VShield Endpoint monitors virtual machine file events and notifies the antivirus engine, via VMware EPSEC (Endpoint Security), which scans and returns a disposition. In this part I will be taking you through the configuration changes required at Virtual Machine (Guest) level and in the Symantec Manager.Īdd the VMware EPSEC driver on each GVM / Master Image Thank your for following the Part1 and Part2of this series.

Symantec endpoint protection tamper protection