topic Sandblast Agent and Symantec Co-existence in Endpoint

Sandblast Agent and Symantec Co-existence

Lincoln_Webber — Tue, 29 Oct 2019 19:13:54 GMT

Guys,

Are there any known compatibility issues with deploying Sandblast Agent to machines with Symantec Endpoint Security?

Re: Sandblast Agent and Symantec Co-existence

Lior_Arzi — Wed, 30 Oct 2019 08:52:00 GMT

you need to make sure you don't run the following competing components together. you should run each component either from SBA or from Symantec.
* Anti Virus

* EP firewall

* Anti-exploit

I believe all the rest should be find.

more than that, if you chose Symantec AV, SBA forensics will still pick up Symantec detections and run Forensics on it.

Re: Sandblast Agent and Symantec Co-existence

Lincoln_Webber — Wed, 30 Oct 2019 13:58:52 GMT

Thank you Lior.