How to Disable Client Intrusion Prevention Notifications in Symantec Endpoint Protection Manager (SEPM)

Products

• Endpoint Protection

Issue/Introduction

You would like to disable Intrusion Prevention notifications / popups from appearing on clients when an Intrusion Prevention event occurs
 

You get popup notifications even when exlusions are in place for particular IP's

Resolution

How to disable these notifications will be based on the mode of control that the client is in:

To Disable Intrusion Prevention notifications for Server Control Mode:

1. Log in to SEPM
2. Select Clients on the left
3. Choose the appropriate group
4. Select the Policies tab
5. Expand Location-Specific Settings and select Server Control next to "Client User Interface Control Settings"
6. Click the Customize button next to "Server Control"
7. Uncheck "Display Intrusion Prevention Notifications"


To Disable Intrusion Prevention Notifications in Mixed Mode:

1. Log in to SEPM
2. Click on Clients on the left
3. Choose the appropriate group
4. Click the Policies tab
5. Expand Location-Specific Settings and click Mixed Control next to "Client User Interface Control Settings"
6. Click the Customize button next to "Mixed Mode"
7. Scroll to the bottom of the list, and in the "notifications" area, click the radial in the "Server" column to give you the ability to override this option on a client.
8. Select the Client User Interface Settings tab
9. Uncheck "Display Intrusion Prevention notifications"


To Disable Intrusion Prevention Notifications in Client Control Mode:

1. Launch the Symantec Endpoint Protection client
2. In the "Network Threat Protection" section of the splash page, select Options
3. Select Intrusion Prevention tab
4. Uncheck "Display Intrusion Prevention notifications


References
This information can be found on page 467 of the Administrator's guide