Understanding the Default location setting and creating unambiguous location switching criteria

Products

• Endpoint Protection

Issue/Introduction

When working with location management in Symantec Endpoint Protection you have one of the following questions:
- How does the "default location" setting work?
- Why is the Symantec Endpoint Protection client not switching to the default location?
- How do I create location criteria so that only one location can match at the same time?

 

Resolution

The default setting come in to play in two situations:

• • The client needs a new location and more than one match - one of these is set as the default.
  • The client needs a new location, none match but there are several locations with no criteria defined - one of these is set as the default.

The SEP client will not switch to a location that matches, if it is already inside a different locations that also matches. This is to avoid excessive jumping from location to location, and applies even if one of the two locations is set to default.


To create unambiguous location criteria where only one location can match at any one time, use the following strategy.

Location A

• Criteria 1 is true (for example; "connected to ethernet")

Location B

• Criteria 2 is true (for example; "connected to wireless")
• AND Criteria 1 is false

Without the second criteria (in italic) both locations could match at the same time, making a client stay in location B even if location A is set to default.