About Symantec Ips Signatures; Enabling Or Disabling Network Intrusion Prevention Or Browser Intrusion Prevention - Symantec 20032623 - Endpoint Protection Small Business Edition Implementation Manual

About Symantec IPS signatures

Enabling or disabling network intrusion prevention
or browser intrusion prevention
Symantec intrusion prevention signatures are installed on the client by default.
See Managing intrusion prevention on your client computers"
Intrusion prevention uses the Symantec signatures to monitor individual packets
or streams of packets. For streams of packets, intrusion prevention can remember
the list of patterns or partial patterns from previous packets. It can then apply
this information to subsequent packet inspections.
Symantec signatures include signatures for network intrusion prevention and
browser intrusion prevention.
Network intrusion
prevention signatures
Browser intrusion prevention
signatures
See Creating exceptions for IPS signatures"
The Symantec Security Response team supplies the attack signatures. The
intrusion prevention engine and the corresponding set of signatures are installed
on the client by default. The signatures are part of the content that you update
on the client.
You can view information about IPS signatures on the Symantec Web site.
http://securityresponse.symantec.com/avcenter/attack_sigs/index.html
You can enable or disable either type of intrusion prevention. Typically, you should
not disable either type of intrusion prevention.
See Managing intrusion prevention on your client computers"
You can also exclude particular computers from network intrusion prevention.
Network signatures match patterns of an attack that can
crash applications or exploit the operating systems on your
client computers.
You can change whether a Symantec network signature
blocks or allows traffic. You can also change whether or not
Symantec Endpoint Protection Small Business Edition logs
a detection from a signature in the Security log.
Browser signatures match patterns of attack on supported
browsers, such as script files that can crash the browser.
You cannot customize the action or log setting for browser
signatures, but you can exclude a browser signature.
on page 234.
Managing intrusion prevention
About Symantec IPS signatures
on page 229.
on page 229.
233