Table: Supported Symantec Endpoint Protection 14.x versions by feature
Feature | 14.2 | 14.1 | 14.0 RU1 | 14.0 MP1 | 14.0 |
Endpoint search¹ |
|
|
|
|
|
Endpoint data recorder search |
|
|
|
||
ATP database search |
|
|
|
|
|
Event forwarding to ATP (live response) |
|
|
|
||
SHA2 whitelisting/ blacklisting |
|
|
|
|
|
MD5 whitelisting/ blacklisting |
|
|
|
|
|
Get a PE file (thru Symantec Endpoint Protection Manager heartbeat) |
|
|
|
|
|
Get a non-PE file (live response) |
|
||||
Delete file (live response) |
|
|
|
||
Delete file (thru Symantec Endpoint Protection Manager heartbeat) |
|
|
|
|
|
Cancel file delete and searches |
|
|
|
|
|
Isolate/rejoin endpoint |
|
|
|
|
|
Insight and submissions redirection from Symantec Endpoint Protection Manager |
|
|
|
|
|
Insight redirection from Symantec Endpoint Protection Manager |
|
|
|
|
|
¹ ATP supports endpoint searches on endpoints running Symantec Endpoint Protection 14.0 and above. However, only endpoints that run Symantec Endpoint Protection 14.0 RU1 and later can take advantage of endpoint searches using EDR 2.0 functionality. Prior versions use EDR 1.0 functionality. See About endpoint detection and response (EDR)
Table: Supported SEP 12.x versions by feature
Feature | Supported Symantec Endpoint Protection 12.x versions |
Endpoint search | ATP supports endpoint searches for the clients that use Symantec Endpoint Protection12.1 RU5 and later. ATP manages the clients that use Symantec Endpoint Protection 12.1 RU 6 MP3 or later with full EDR 1.0 functionality. However, for the clients that use a version between Symantec Endpoint Protection 12.1 RU5 and 12.1 RU6 MP 3, some functionality may be limited depending upon the version of the client. |
Endpoint data recorder search | Supported |
ATP database search | 12.1 RU5 and later |
Event forwarding to ATP (near live response) | Supported |
SHA2 whitelisting/ blacklisting | 12.1 RU6 MP7 |
MD5 whitelisting/ blacklisting | 12.1 RU2 and later |
Get a file | 12.1 RU6 MP3 |
Delete file (live response) | Unsupported |
Delete file (thru Symantec Endpoint Protection Manager heartbeat) | 12.1 RU6 MP3 and later |
Cancel file delete and searches | 12.1 RU6 MP5 and later |
Isolate/rejoin endpoint | 12.1 RU6 MP3 |
Insight and submissions redirection from Symantec Endpoint Protection Manager | 12.1 RU6 and later |
Insight redirection from Symantec Endpoint Protection Manager | 12.1 RU3 and later |
Table: Supported Symantec Endpoint Protection Manager versions by feature
Feature | Symantec Endpoint Protection Manager version |
Private cloud settings availability | SEPM 12.x |
Delete blacklist/whitelist | SEPM 14.0 and later |
API OAuth 2 authentication requirement | SEPM 12.1 RU6 and later |
There are no reviews yet.