Configuring Symantec Protection Engine to handle encrypted container files

HOWTO79791
Last Updated October 20, 2014
Copy Article Title/URL
Feedback
Subscribe

Configuring Symantec Protection Engine to handle encrypted container files

This topic explains the options that are configured using the Core server with user interface mode. to work with the Core server only mode.

Encrypted files are unscannable in Symantec Protection Engine. If you want to protect your network from threats of encrypted container files, configure Symantec Protection Engine to handle unscannable encrypted container files.

To configure Symantec Protection Engine to handle encrypted container files

  1. In the console on the primary navigation bar, click Policies.

  2. In the sidebar under Views, click Filtering.

  3. In the content area on the Container Handling tab, under Encrypted Container Handling, select Enable Encrypted Container Handling check box.

  4. Under Enable Encrypted Container Handling, select one of the following to specify how Symantec Protection Engine handles encrypted files:

    Log only

    Generates a log entry.

    By default, Symantec Protection Engine only logs instances of encrypted container files.

    Block

    Blocks the encrypted container files and generates a log entry.

    Delete

    Deletes the encrypted container files and generates a log entry.

    The options are available only if the Enable Encrypted Container Handling is enabled.

  5. Check Quarantine.

    The Quarantine option is available only if Enable Encrypted Container Handling is enabled and quarantine server is configured in Symantec Protection Engine.

  6. On the toolbar, select one of the following options:

    Save

    Saves your changes.

    Use this option to continue making changes in the console until you are ready to apply them.

    Apply

    Applies your changes.

    Your changes are not implemented until you apply them.

See About container files in Symantec Protection Engine .

See Configuring Symantec Protection Engine to handle partial container files.

See Configuring Symantec Protection Engine to handle malformed container files.

See Configuring the quarantine server in Symantec Protection Engine.

Imported Document ID: HOWTO79791
Legacy ID: v63704886_v80846623

Thanks for your feedback. Let us know if you have additional comments below. (requires login)

    © 1995-2020 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.