ws reputation 1 symantec endpoint protection

The False Positive Prevention section is designed primarily to provide recommendations on how to proactively make sure your files and files from your trusted vendors have a good reputation. This document is separated into three key areas of recommended practices: Creating Effective Insight Policies False Positive Prevention Correcting a False Positive The Creating Effective Insight Policies section provides specific advice on recommended Insight configurations based on your corporation s specific tolerance for risk. This typically results in a reduction of percent of scanning overhead while maintaining a higher level of security than previous products.

Just as you would want to get a second opinion from another physician about a potential medical problem, Insight provides a second, community-based assessment to our other security technologies to improve their detection rate and reduce false positives.Ģ Third, since Insight can identify trusted, high-reputation files (as well as low-reputation bad files), our product now uses this data to avoid scanning highly-trusted programs, unless they are modified or change. 2 False Positive Prevention Correcting a False Positive Second, all of SEP s security technologies (such as SONAR behavioral protection and Malheur heuristics) now leverage Insight reputation data as a second opinion to improve their accuracy. Since most malware is introduced via Web surfing, instant messaging, or, by checking the reputation of all such files/attachments before they are saved and used drastically reduces infections on endpoints. This feature, called Download Insight, enables SEP to block all low-reputation files when they are introduced and before they can take root and cause damage. Symantec Endpoint Protection (SEP) uses reputation-based technology to protect you in three ways: First, SEP uses Insight to evaluate new files before they are introduced to a protected machine. Based on advanced data mining techniques, Insight seeks out mutating code separating out risky, low-reputation files from those that are safe. 1 Insight Deployment Best Practices Overview Symantec Insight is a reputation-based security technology that leverages the anonymous software adoption patterns of Symantec s hundreds of millions of users to automatically discover and classify every single software file, good or bad, on the Internet.

Ws reputation 1 symantec endpoint protection