17 april, 2013 at 2:26 PM

A user is getting on a daily basis a notification about a tracking cookies in Symantec Antivirus.

The Tracking cookies had a path to %appdata%\Locallow\Sun\java\deployment\cache\....

So here is how you can exclude tracking cookies (trackware) from Symantec Endpoint Protection.

 

1.) Click Policies.

2.) Click Centralized Exceptions.

3.) Click Add a Centralized Exception Policy.

4.) Change the name and enter a description, if desired.

5.) Click Centralized Exceptions.

6.) Click Add -> Security Risk Exceptions -> Known Risks.

7.) Scroll down and put a check next to <Tracking Cookie>.

8.) Check the box for Log when the security risk is detected.

9.) Click OK.

10.) Click OK.

11.) Click Yes on the pop-up about assigning the policy.

12.) Select the group(s) that you want to apply the policy to.

13.) Click Assign.

14.) Click Yes.

This will create and assign an exclusion so that these are no longer deleted, just logged. The next time your clients check in with the SEPM (every 15 minutes by default), this exclusion will be placed and you should no longer see these pop-ups. If you don't even want to see the entry in the log, skip step #8 above, and SEP will just completely ignore them

Commentaar