it.ucsf.edu

SEP for Mac: FAQ

Cyndi Galvan's picture

Who can use SEP and how much does it cost?

SEP is provided free to the UCSF community and can be used on computers of Faculty, Staff, Student or Affiliate companies working on UCSF business; both University-owned and home (personal) systems.

Can our department use the UCSF license to manage our own clients, including policies, settings, and reporting?

The UCSF SEP service is managed centrally by ITS and licenses are only distributed through this service offering.

ITS does offer SEP group administration through its SEP server cluster to allow groups/departments to manage their own set of clients allowing your department to:

  • centrally manage your clients
  • set policies specific to your group
  • create automated reports
  • without the need to run individual servers

To request SEP group administration, please submit a ticket to the help desk with the contact information for the IT Manager and the MSO or Director of your group/department.

What if my computer is unable to reach the UCSF SEP server; will it still get updates?

All SEP for Mac clients receive updates directly from the Symantec Corporate LiveUpdate server.

What ports do we need to allow in our hardware firewalls so  SEP clients can get updates automatically and correctly communicate with the management servers?

The UCSF SEP client uses standard http and https ports to communicate with the central SEP servers.  If you restrict Port 80 or Port 443 on your network, please contact the ITS Customer Service Desk to receive a list of SEP servers to put in your firewall rules.

I'm already running an anti-virus and host-based firewall program. Can I install SEP for additional protection?

Running multiple anti-virus and firewall programs will degrade your system's performance and may cause a number of issues.  We highly recommend removing other anti-virus, anti-spyware, and anti-malware before installing SEP for Mac.

 

Does SEP for Mac have a firewall component?

No.  Although SEP for Mac contains network intrusion prevention technology (IPS), IT Security still highly recommends using the built-in MacOS X firewall for added security. 

To enable the built-in Firewall on MacOS 10.10+, go the Apple Menu -> Preferences -> Security&Privacy -> Firewall.  If it shows "Firewall: Off", click on the 'Start' button to activate the Firewall.  For the first couple of days, you will receive prompts asking which applications should be allowed to communicate on the network.  This may also happen anytime you update or install new applications.

I have a PowerPC Mac and Symantec says SEP should support it.  But the software download page say Intel only, where do I get the installer?

SEP for Mac does not support PowerPC Macs.   Apple has not released a PowerPC based computer since 2006 and the past two major revisions of the OS no longer supports the platform.

A full matrix of OSX to SEP version compatibility can be found in the Symantec KB Article TECH131045


If you are running a business critical application that requires the use of a PowerPC Mac running MacOS 10.4, please open a request ticket through the Customer Support Help Desk with a business justification and IT Security will provide you options to move forward.

 

Does SEP for Mac work on MacOS X Server?

Although Symantec does not officially support OS X Server, there are only minor differences between the desktop version of OS X and OS X Server; SEP for Mac will function and scan for threats as expected.

Additional guidelines on best practices for using SEP for OS X Server can be found at Symantec KB Article TECH132046

 

How do I exclude a specific folder or file from being scanned?

Open Symantec Endpoint Protection from either the icon located next to the clock or by going through finder, applications, Symantec solutions.  Click the settings button "click scan zone settings" which will require the system password.

Enter the path for the folder or files under the Don't scan section.

 

How do I remove quarantined files from SEP for Mac?

Launch Symantec Endpoint Protection by selecting the shield icon, choosing "Symantec Endpoint Protection" and then choose "Open Symantec Endpoint Protection".  The program can also be accessed from the finder by going to Applications, Symantec Solutions, Symantec Endpoint Protection application and double clicking.

 

Once the program is fully launched selecting the "Tools" pull down menu and then selecting "Quarantine" will bring up the window displaying all quarantined files.  This is where files can be repaired, deleted, or restored if they are known to be safe files improperly flagged as malware.  

Where do I find more information on SEP for Mac?

Please visit Symantec KB Article TECH134203 for more advanced information.

Pages