Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2

Transcription

1 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Revision Date: Thursday, June 7, 2012

2

3 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 This document includes the following topics: About this document This MP2 release of Symantec Endpoint Protection 11 Release Update 7 (RU7 MP2) can only be installed over RU7 or RU7 MP1 System requirements What's new in Symantec Endpoint Protection and Symantec Network Access Control 11 Release Update 7, MP1 and MP2 What's new in Symantec Endpoint Protection and Symantec Network Access Control 11 Where to get more information Symantec Endpoint Protection Manager is no longer supported on versions prior to Windows XP SP2 What you need to know before you install or update your software User documentation changes summary

4 4 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 About this document Known issues and additional information Resolved issues in this release Legal Notice About this document Please review this document in its entirety before you install or roll out Symantec Endpoint Protection, Symantec Network Access Control, or call for technical support. It describes known issues and provides additional information that is not included in the standard documentation or the context-sensitive help. You can find the latest version of this information by using the following link to the PDF file of the Release Notes: release_notes_sep_11.0_ru7_mp2 Documentation version: Thursday, June 7, 2012 This MP2 release of Symantec Endpoint Protection 11 Release Update 7 (RU7 MP2) can only be installed over RU7 or RU7 MP1 Do not attempt to install this release over earlier versions. It must be installed over RU7 or RU7 MP1. [ ] System requirements Symantec software requires specific protocols, operating systems and service packs, software, and hardware. All the computers to which you install Symantec software should meet or exceed the recommended system requirements for the operating system that is used. See the Installation Guide for Symantec Endpoint Protection and Symantec Network Access Control for full system requirements. Table 1-1 summarizes the minimum requirements for the computer on which you install the Symantec Endpoint Protection Manager.

5 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 System requirements 5 Table 1-1 Symantec Endpoint Protection Manager system requirements Component Operating system Requirement 32-bit systems: Windows XP Professional with Service Pack 2 or later (x86 or x64) Windows Small Business Server 2003 Windows Server 2003 Standard Edition/Enterprise Edition/Datacenter Edition/Storage Edition/Web Edition Windows Server 2008 Standard/Windows Server 2008 Enterprise/Windows Server 2008 Datacenter/Windows Web Server 2008 (all Service Packs supported) 64-bit systems: Windows XP Professional with Service Pack 2or later Windows Server 2003 Standard Edition/Enterprise Edition/Datacenter Edition/Storage Edition/Small Business Server Windows Server 2008 Standard/Windows Server 2008 Enterprise/Windows Server 2008 Datacenter/Windows Web Server 2008 (R2 and all Service Packs supported) Windows Essential Business Server 2008 Standard Edition/Windows Essential Business Server 2008 Premium Edition (R2 and all Service Packs supported) Windows Small Business Server 2008 Standard Edition/Windows Small Business Server 2008 Premium Edition (R2 and all Service Packs supported) Database The Symantec Endpoint Protection Manager includes an embedded database. 32-bit systems: You can also use Microsoft SQL Server 2000 with Service Pack 4 or later, Microsoft SQL Server 2005 with Service Pack 2, Microsoft SQL Server 2008, or Microsoft SQL Server bit systems: You can also use Microsoft SQL Server 2000 with Service Pack 3 or later, Microsoft SQL Server 2005 with Service Pack 2, Microsoft SQL Server 2008, or Microsoft SQL Server Microsoft SQL Server is optional. Other software 32-bit systems: Internet Information Services server 5.0 or later with Web services enabled. 64-bit systems: Internet Information Services server 5.1 or later with Web services enabled. Internet Explorer 6.0 or later Static IP address recommended

6 6 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 System requirements Table 1-1 Symantec Endpoint Protection Manager system requirements (continued) Component Hardware Requirement 32-bit systems: 1 GB RAM (2-4 GB recommended) 4 GB on the hard disk for the server, plus 4 GB for the database VGA (640x480) or higher resolution video adapter and monitor 64-bit systems: 1 GB RAM (2-4 GB recommended); 4 GB RAM minimum for all editions of Windows Small Business Server 2008 and Windows Essential Business Server GB on the hard disk for the server, plus 4 GB for the database; Small Business Server 2008: 60 GB for the server; Essential Business Server 2008: 45 GB for the server VGA (640x480) or higher resolution video adapter and monitor Table 1-2 summarizes the minimum requirements for the remote computer on which you run the Symantec Endpoint Protection Manager console.

7 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 System requirements 7 Table 1-2 Symantec Endpoint Protection Manager remote console system requirements Component Operating system Requirement 32-bit systems: Windows XP Professional with Service Pack 2or later Windows Small Business Server 2003 Windows Server 2003 Standard Edition/Enterprise Edition/Datacenter Edition/Storage Edition/Web Edition/ Windows Vista (all x86 versions) Windows 7 (all x86 versions) Windows Server 2008 Standard/Windows Server 2008 Enterprise/Windows Server 2008 Datacenter/Windows Web Server 2008 (all Service Packs are supported) 64-bit systems: Windows XP Professional with Service Pack 2 or later Windows Server 2003 Standard Edition/Enterprise Edition/Datacenter Edition/Storage Edition/Web Edition/Small Business Server Windows Vista (all x64 versions) Windows 7 (all x64 versions) Windows Server 2008 Standard/Windows Server 2008 Enterprise/Windows Server 2008 Datacenter/Windows Web Server Windows Server 2008 (R2 and all Service Packs are supported) Windows Essential Business Server 2008 Standard Edition/Windows Essential Business Server 2008 Premium Edition (R2 and all Service Packs are supported) Windows Small Business Server 2008 Standard Edition/Windows Small Business Server 2008 Premium Edition (R2 and all Service Packs are supported) Hardware 32-bit systems: 512 MB of RAM minimum, 1-2 GB recommended 64-bit systems: 512 MB RAM minimum, 1-2 GB recommended 15 MB hard drive VGA (640x480) or higher resolution video adapter and monitor Table 1-3 summarizes the minimum requirements for the remote computers on which you run the Symantec Endpoint Protection Manager Web Console. Table 1-3 Symantec Endpoint Protection Manager Web Console system requirements Component Browser Requirement Internet Explorer 7 or later, with Enhanced Security Configuration disabled

8 8 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 System requirements Table 1-4 summarizes the minimum requirements for the computers on which you install the client software for either Symantec Endpoint Protection or Symantec Network Access Control on Windows. Table 1-4 Windows client software system requirements Component Operating system Requirement 32-bit systems: Windows 2000 Professional/Server/Advanced Server/Datacenter Server with Service Pack 3 or later Windows XP Professional/XP Embedded with Service Pack 1 or later Windows Small Business Server 2000/Windows Small Business Server 2003 Windows Server 2003 R2, Standard Edition/Enterprise Edition/Datacenter Edition/Storage Edition/Web Edition Windows Server 2003 with Service Pack 1, Standard Edition/Enterprise Edition/Datacenter Edition/Storage Edition/Web Edition Windows Server 2003 with SP2, Standard Edition/Enterprise Edition/Datacenter Edition/Storage Edition/Web Edition Windows Vista (all x86 versions and Service Packs) Windows 7 (all x86 versions) Windows Fundamentals for Legacy PCs Windows Server 2008 Standard/Windows Server 2008 Enterprise/Windows Server 2008 Datacenter/Windows Web Server 2008 (all Service Packs supported). Core installations are supported. 64-bit systems: Windows XP Professional with Service Pack 1 or later Windows Server 2003with Service Pack 1 Standard Edition/Enterprise Edition/Datacenter Edition/Storage Edition/Small Business Server Windows Vista (all x64 versions and Service Packs) Windows 7 (all x64 versions) Windows Server 2008 Standard/Windows Server 2008 Enterprise/Windows Server 2008 Datacenter/Windows Web Server 2008 (R2 and all Service Packs supported). Core installations are supported. Windows Essential Business Server 2008 Standard Edition/Windows Essential Business Server 2008 Premium Edition (R2 and all Service Packs supported) Windows Small Business Server 2008 Standard Edition/Windows Small Business Server 2008 Premium Edition (R2 and all Service Packs supported)

9 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 System requirements 9 Table 1-4 Windows client software system requirements (continued) Component Other software Requirement Internet Explorer 6.0 or later Terminal Server clients connecting to a computer with antivirus protection have the following additional requirements: Microsoft Terminal Server RDP (Remote Desktop Protocol) client Citrix Metaframe (ICA) client 1.8 or later if you use Citrix Metaframe server on Terminal Server Hardware 32-bit systems: 512 MB of RAM, (1 GB recommended) for Windows XP, Windows XP Embedded, and Windows Fundamentals for Legacy PCs 1 GB of RAM minimum (2-4 GB recommended) for Windows Vista, Windows 7, Windows Server 2003 (all editions), and Windows Server 2008 (all editions) 600 MB hard disk VGA (640x480) or higher resolution video adapter and monitor 64-bit systems: 1 GB of RAM minimum (2-4 GB recommended) for most systems 4 GB of RAM minimum for all editions of Windows Small Business Server 2008 and Windows Essential Business Server MB hard disk XGA (1,024x768) or higher-resolution video adapter and monitor Table 1-5 summarizes the minimum requirements for the computers on which you install the Mac client software. Table 1-5 Mac client software system requirements Component Operating system Hardware Requirement Mac OS X MB of RAM (512 MB recommended) for Mac OS X MB of RAM for Mac OS X GB of RAM for Mac OS X 10.6 and above 300 MB of available hard disk space for installation

10 10 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 What's new in Symantec Endpoint Protection and Symantec Network Access Control 11 Release Update 7, MP1 and MP2 What's new in Symantec Endpoint Protection and Symantec Network Access Control 11 Release Update 7, MP1 and MP2 This release contains all of the features that were delivered in version (RU7), plus the following new features in MP1 and MP2. Table 1-6 Feature New features in this release Benefit Group Update Provider support for the HTTPS protocol GUP logs enhanced VeriSign support in Symantec Protection Center FIPS level 1 compliance Updated tools on the product disc In RU7 MP1, You can now configure the Group Update Provider to use the HTTPS protocol as well as the HTTP protocol to deliver content. In RU7 MP2, logs for Group Update Provider actions will be recorded in the Sylink.log and Debug.log files. In RU7 MP1, Symantec Protection Center is now configured to manage three VeriSign hosted services: Managed PKI, Managed PKI for SSL, and VeriSign Identity Protection. In RU7 MP1, you can deploy Symantec Endpoint Protection with a FIPS-compliant configuration to protect its server-to-server communication, server-to-client communication, and console-to-server communication. Symantec Endpoint Protection RU7 MP1 includes the following updated tools: Symantec Endpoint Protection Integration Component version 7.0 SP2 and version 7.1 The Symantec Endpoint Protection Integration Component enables you to perform common Symantec Endpoint Protection client operations from the Symantec Management Console. Symantec IT Analytics You can install the Symantec Management Platform, which enables you to share data between Symantec Endpoint Protection and other platform services.

11 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 What's new in Symantec Endpoint Protection and Symantec Network Access Control See What's new in Symantec Endpoint Protection and Symantec Network Access Control 11 on page 11. What's new in Symantec Endpoint Protection and Symantec Network Access Control 11 The current release includes the following improvements that make Symantec Endpoint Protection and Symantec Network Access Control easier and more efficient to use. Table 1-7 New features in this version Feature A Web-based console provides a single sign-on capability for registered Symantec products Benefit Symantec Protection Center is a Web-based console that enables you to access and manage multiple, supported Symantec products. The console provides visibility and analytics across products as well as useful security feedback and attack statistics. The console provides a single sign-on screen for the following registered Symantec products: Symantec Endpoint Protection Symantec Critical System Protection Symantec Web Gateway Symantec Brightmail Gateway Symantec IT Analytics Symantec Data Loss Prevention A Web-based console for Symantec Endpoint Protection Manager provides easier remote management access You can access Symantec Endpoint Protection Manager remotely in a Web-based console. The Java-based remote console is also still available. Symantec Endpoint Protection includes client software to run on a Mac computer Scheduled scans can start at random times You can use Symantec Endpoint Protection Manager to manage Mac clients that run Symantec software to provide virus and spyware protection on Mac OS X computers. You can specify a time interval during which scheduled scans start, and enable the scans to start at different times within that time interval. By running scans at random times, you can increase scan performance, especially in virtualized environments.

12 12 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Where to get more information Table 1-7 New features in this version (continued) Feature Enhanced default Antivirus and Antispyware security policies Benefit For new product installations, changes in the default security policies make Symantec Endpoint Protection more efficient at detecting malware. Customers who upgrade to Symantec Endpoint Protection version 11 RU6 MP2 or MP3 do not receive new default policies. To see the new recommended Antivirus and Antispyware security policies settings so that you can make the settings changes in your policies manually, see Security Response recommendations for Symantec Endpoint Protection settings. The Symantec Endpoint Recovery Tool scans and removes malware from severely infected computers The SymantecEndpointRecoveryTool provides an image that you can burn on a disc, and then use to scan and remove malware from client computers. You use this tool for the computers that are too infected for Symantec Endpoint Protection to clean effectively. You can download the tool from the following URL: You need your Symantec Endpoint Protection serial number to download the tool. Host Integrity policies check for additional security software You can run a Host Integrity check to see whether the client computers run the following software: Norton Antivirus 2010 Norton Internet Security 2010 Norton 360 Version 3.0 Symantec Endpoint Protection Version 11 Release Update 6, MP2 or MP3 McAfee Internet Security 2010 McAfee VirusScan Plus 2010 McAfee Total Protection 2010 McAfee VirusScan Enterprise 8.7i Where to get more information Sources of information include the following: Getting Started with Symantec Endpoint Protection Getting Started with Symantec Network Access Control Installation Guide for Symantec Endpoint Protection and Symantec Network Access Control Administration Guide for Symantec Endpoint Protection and Symantec Network Access Control

13 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Where to get more information 13 Client Guide for Symantec Endpoint Protection and Symantec Network Access Control Implementation Guide for Symantec Network Access Control Enforcement LiveUpdate Administrator Getting Started Guide LiveUpdate Administrator User's Guide Symantec Central Quarantine Implementation Guide Symantec Client Firewall Policy Migration Guide Symantec Endpoint Protection Manager Database Schema Reference Guide Symantec Endpoint Protection 11.0 Windows Small Business Server Best Practices White Paper Tool-specific documents, located in some subdirectories of the Tools folder on the product disc Online Help that contains the information that is in the guides plus context-specific content The primary documentation is available in the Documentation folder on the product disc. Updates to the documentation are available from the Symantec Technical Support Web site. Table 1-8 Symantec Web sites Types of information Symantec Endpoint Protection trial version Public Knowledge Base Releases and updates Web address Manuals and documentation updates Contact options Release notes and additional post-release information Virus and other threat information and updates Product news and updates Symantec Endpoint Protection forums board.id=endpoint_protection11

14 14 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Symantec Endpoint Protection Manager is no longer supported on versions prior to Windows XP SP2 Table 1-8 Symantec Web sites (continued) Types of information Symantec Network Access Control forums Web address network-access-control Symantec Endpoint Protection Manager is no longer supported on versions prior to Windows XP SP2 Effective with RU7 MP2, Symantec Endpoint Protection Manager can no longer be hosted on servers running on operating systems prior to Microsoft Windows XP Service Pack 2. This means that the Manager cannot be run on servers running Windows 2000, Windows XP, or Windows XP Service Pack 1. Clients are not affected, and can still be installed on those operating systems. What you need to know before you install or update your software System requirements for Symantec Endpoint Protection and Symantec Network Access Control and other material to consider before installation are located in the Getting Started with Symantec Endpoint Protection and Getting Started with Symantec Network Access Control documents, and in the Installation Guide. See Latest documentation on page 23. The Common Topics page of the Support site provides individual articles and links that are designed to provide installation assistance, best practices, and FAQs. Installing the product for the first time You can use the following main steps to install the product on a computer on which a version is not already installed. Table 1-9 Process for installing the product Step Step 1 Step 2 Action Review system and installation requirements Plan and prepare for the installation Description Confirm that your network and the computers you plan to use meet the requirements to install and run the software. Decide which type of database to use, plan your deployment, and prepare client computers.

15 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 What you need to know before you install or update your software 15 Table 1-9 Process for installing the product (continued) Step Step 3 Step 4 Action Install Symantec Endpoint Protection Manager Create and deploy a client installation package Description Run the installation program from the product disc. The program first installs the management server software. It then configures the management server and creates the database. Follow the procedure that corresponds to the type of database you select. See Symantec Endpoint Protection Manager requires TCP port 9090 by default on page 16. After you configure the database, you are asked if you want to run the Migration and Deployment Wizard. This wizard creates and then pushes out a default client software installation package. Alternately, you can: Use the Migration and Deployment Wizard from the Start menu at any time. Create and deploy client software at a later time using the Find Unmanaged Computers utility in the console. Note: If this installation is an upgrade deployment from Symantec Endpoint Protection, there is no need to re-deploy the client. The installation of Symantec Network Access Control activates the Symantec Network Access Control features on the client without further deployment. To view this topic with links to the procedures listed above, go to the following URL: Upgrading to a new release of Symantec Endpoint Protection or Symantec Network Access Control You can upgrade to the latest release update of Symantec Endpoint Protection or Symantec Network Access Control. To install a new version of the software, you must perform certain tasks as part of your upgrade plan to ensure a successful upgrade. The information in this section is specific to upgrading software in environments where a version of Symantec Endpoint Protection or Symantec Network Access Control 11.x is already installed.

16 16 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 What you need to know before you install or update your software Table 1-10 Process for upgrading to the latest release update Step Step 1 Action Back up the database Description Back up the database used by the Symantec Endpoint Protection Manager to ensure the integrity of your client information. Step 2 Turn off replication Turn off replication on all sites that are configured as replication partners. This avoids any attempts to update the database during the installation. Step 3 If you have Symantec Network Access Control installed, enable local authentication Enforcers are not able to authenticate clients during an upgrade. To avoid problems with client authentication, Symantec recommends that you enable local authentication before you upgrade. After the upgrade is finished, you can return to your previous authentication setting. Step 4 Step 5 Stop the Symantec Endpoint Protection Manager service Upgrade the Symantec Endpoint Protection Manager software The Symantec Endpoint Protection Manager service must be stopped during the installation. Install the new version of the Symantec Endpoint Protection Manager on all sites in your network. The existing version is detected automatically, and all settings are saved during the upgrade. Step 6 Turn on replication after the upgrade Turn on replication when the installation is complete to restore your configuration. Step 7 Upgrade Symantec client software Upgrade your client software to the latest version. To view this topic with links to the procedures listed above, go to the following URL: Symantec Endpoint Protection Manager requires TCP port 9090 by default Symantec Endpoint Protection Manager uses TCP 9090 to display the Symantec Endpoint Protection Manager console. If other software is listening on this port, you cannot log on to the Symantec Endpoint Protection Manager console. Note that Symantec IM Manager uses TCP port If you are required to run Symantec Endpoint Protection Manager console on a computer that also requires other software that uses TCP port 9090, you can change the port for Symantec Endpoint Protection Manager console.

17 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 User documentation changes summary 17 To change TCP port 9090, edit the following file with WordPad (Notepad does not correctly show the XML line feeds): \Symantec\Symantec Endpoint Protection Manager\tomcat\conf\server.xml Search for port=9090 and change 9090 to a different TCP port number. Save the file, and then restart Symantec Endpoint Protection Manager with the Administrative Tools > Services utility. You can then log on to the Symantec Endpoint Protection Manager console. Be aware, however, that changing port 9090 partially disables the online Help system. Every time you use Help, you will have to change 9090 in the URL to the changed port number to display the Help text. See The default port for Enforcer communication with Symantec Endpoint Protection Manager is 8014 on page 17. The default port for Enforcer communication with Symantec Endpoint Protection Manager is 8014 The default port for non-encrypted communication (HTTP) with the Symantec Endpoint Protection Manager has been changed from 80 to Encrypted communications (HTTPS) continue to use port 443. This port setting applies to all types of Enforcers. User documentation changes summary This release includes some updates to the following documents: Release Notes for Symantec Endpoint Protection and Symantec Network Access Control (this document) Installation Guide for Symantec Endpoint Protection and Symantec Network Access Control System requirements have been changed to state that servers running the Microsoft Windows 2000 operating system can no longer host Symantec Endpoint Protection Manager. They can, however, host the Symantec Endpoint Protection client. This release includes the following new document: FIPS deployment guide: Symantec Endpoint Protection version 11, RU 6a, MP 2 and later FIPS Deployment Guide, available at the following location: Symantec Endpoint Protection version 11, RU 6a, MP 2 and later FIPS Deployment Guide See Where to get more information on page 12.

18 18 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Known issues and additional information See Latest documentation on page 23. Known issues and additional information Upgrade issues The following items list the known issues in Symantec Endpoint Protection 1.0, Release Update 7, MP1 and MP2. The following upgrade issues exist. To upgrade the Symantec Endpoint Protection Manager server from version 11.0 RU7, RU7 MP1, and later requires version 12.1 RU1 and later; upgrades to version 12.1 are not supported Symantec Endpoint Protection Manager server versions 11.0 RU7, RU7 MP1, and later support migration only to Symantec Endpoint Protection Manager 12.1 RU1 and later. Symantec Endpoint Protection Manager server version 11.0 RU7 cannot migrate to Symantec Endpoint Protection Manager server 12.1 due to database schema differences between the two products. This migration path is blocked with an error message. Migration to Symantec Endpoint Protection Manager 12.1 is supported from Symantec Endpoint Protection Manager 11.0 RU6a and earlier, but not RU7. Note: This limitation only applies to the Symantec Endpoint Protection Manager server. Client migration from Symantec Endpoint Protection 11.0 RU7 to Symantec Endpoint Protection 12.1 is fully supported. Table 1-11 Migration paths If you have Symantec Endpoint Protection Manager version... Symantec Endpoint Protection Manager 11.0 RU7, RU7 MP1, RU7 MP2 Symantec Endpoint Protection Manager 11.0 RU7, RU7 MP1, RU7 MP2 Symantec Endpoint Protection Manager 11.0 RU6a and earlier You can migrate to... Symantec Endpoint Protection Manager 12.1 RU1 and later Symantec Endpoint Protection Manager 12.1 is blocked Symantec Endpoint Protection Manager 12.1 and later

19 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Known issues and additional information 19 Table 1-11 Migration paths (continued) If you have Symantec Endpoint Protection Manager version... Symantec Endpoint Protection client 11.0 RU 6, RU7, RU7 MP1, RU7 MP2 You can migrate to... no restrictions Installation issues Migration issues [ , , ] The following installation issues exist. Symantec Endpoint Protection Manager fails to install properly on Windows 2008 servers Symantec Endpoint Protection Manager requires certain IIS roles when installed on a Windows 2008 server. These roles are required for the Manager and specifically for the Reporting function. For details on the setup and configuration of these roles, see the following KB article: [ ] The following migration issues exist. Migrating unmanaged clients does not use a blank serdef.dat file Earlier versions of the Installation Guide for Symantec Endpoint Protection gave instructions for using a blank Serdef.dat file. Those instructions are no longer valid, and migration is done internally to the product. [ ] Symantec Endpoint Protection Manager issues The following issues exist with the management server.

20 20 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Known issues and additional information Enhancements to filtering which clients you can view on the Clients tab You can display which clients in a group appear on the Clients tab, based on the operating system or account type. You can display or hide which computers are connected to the management server. You can also configure how many clients appear on each page to make the list easier to manage. There is now a new Client View Filter setting that is retained by the Management Server and stored with the login name of the individual administrator or limited administrator. If an administrator sets a filter condition, that condition is retained for that administrator. Different administrators will see only the filters that they have set themselves. [ ] Symantec Endpoint Protection Manager policy issues The following policy issues exist with the management server. System Lockdown recovery instructions are unclear System Lockdown works by blocking all files that you have not already deemed as safe. Detailed instructions for setting up the File Fingerprint list for System Lockdown appear on page 567 of the Administration Guide for Symantec Endpoint Protection and Symantec Network Access Control. If you mistakenly did not include a core Windows program on the File Fingerprint list, you need to correct the omission before restarting your clients. You can either disable System Lockdown on Symantec Endpoint Protection Manager, or add the file fingerprints that are missing, following the instructions on page 567. The next step is to restart the client computers in Safe Mode with Network Support. This restart will correct the issue by allowing the clients to download updated policies from Symantec Endpoint Protection Manager. Restarting in Safe Mode with Network Support is only necessary in this case of the computer being unable to restart. A SafeModewithNetworkSupport restart, in that case, will resolve the issue. Otherwise, a simple restart is sufficient. [ ] Prefix variables for centralized exceptions for Macs do not appear in the glossary If you add a centralized exception for a security risk file or folder for Mac, the glossary for the prefix variables incorrectly displays an explanation of the prefix variables for Windows exceptions. The prefix variables for Mac exceptions are

21 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Known issues and additional information 21 None, Home, Application, and Library. The prefix variables are the top-level folders. You can specify sub-folders or specific files in the File or folder text box. [ ] Context-sensitive help for Risk Tracer is missing some information For the Symantec Endpoint Protection Manager console, the following information should be included in the Risk Tracer help topic: Risk Tracer requires that the Number of seconds to automatically block an attacker s IP address option is enabled in the Intrusion Prevention policy. The firewall must also be enabled. For the Symantec Endpoint Protection client, the following information should be included in the Auto-Protect Advanced Options help topic: Risk Tracer requires that the Number of seconds to automatically block an attacker s IP address option is enabled on the Intrusion Prevention tab of the Network Threat Protection settings dialog box. The firewall must also be enabled. [ ] Reporting The following reporting issues exist. Audit report filter will have the domain name of "??" after upgrading to RU7 if the domain name contains a non-english character To work around this issue, do the following after upgrading to RU7: 1. Modify the audit filter with the correct domain name. 2. Save the filter at the console. [ ] Changes made to syslog display The display of syslog events has changed in response to customer requests: The source computer IP no longer shows " " as its address. It now shows a blank in the syslog. The IP Address field has been added to syslog to contain the address of computers on which risks are detected. Both settings appear in exported syslogs.

22 22 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Known issues and additional information [ ] The name of the server sending reports on the deployment of Symantec Endpoint Protection is now "[email protected]" This corrects an earlier error, in which the server identified itself as "[email protected]". The name currently in use, "[email protected]", is correct. [ ] Symantec Endpoint Protection Windows client issues The following issues exist on the Windows client. Some features / msi codes are only available on 32-bit systems The table on page 194 of the Installation Guide for Symantec Endpoint Protection and Symantec Network Access Control, entitled Symantec Endpoint Protection client features, has omissions. It fails to specify that the following capabilities are only available on 32-bit systems: SymProtectManifest POP3SMTP [ ] Blocked device notifications on the client may be confusing In Application and Device Control, there is a checkbox option: Notify users when devices are blocked or unblocked. The notification checkbox triggers a pop-up message that displays one of the following messages on the client: The device was disabled successfully. The device was enabled successfully. These messages correspond to blocked and unblocked on the server side. [ ] In Client Control Mode, many log entries appear When a client is in Client Control Mode, default firewall rules are in effect. The last of these rules is to block all packets and write the action to the log. This is the

23 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Known issues and additional information 23 Enforcer issues source of the log entries. It is normal behavior and enables users to examine what traffic has been blocked and to take appropriate action. [ ] Automatic blocking of IP addresses does not work on an unmanaged Symantec Endpoint Protection client When you enable the Number of seconds to automatically block an attacker s IP address option on an unmanaged client computer, port scanners and other attackers are not blocked. To enforce the automatic blocking, you should create a firewall rule to block all other IP traffic. [ ] The following Enforcer issues exist. Wireless clients must use the same shared secret for 802.1x authentication to the LAN Enforcer and the RADIUS server The documentation for configuring shared secrets of a RADIUS server, appearing on page 217 of the Implementation Guide for Symantec Network Access Control Enforcement, only applies to wired clients. Wireless clients cannot have different shared secrets for the RADIUS server and for the LAN Enforcer. They must use the same shared secret for both servers. [ ] Documentation issues The following documentation issues exist. Latest documentation The user documentation might be updated between product releases. You can locate the latest user documentation at the Symantec Technical Support Web sites: Symantec Endpoint Protection documentation Symantec Network Access Control documentation

24 24 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Known issues and additional information Note: Some documents refer to CDs. Beginning with Symantec Endpoint Protection 11.0 RU6, all delivery of software and documentation is on DVD. Please ignore references to CDs. [ ] The URL for external threats is incorrect The URL for descriptions of external security threats shown in earlier documentation was incorrect. To find the Security Response A-Z Listing of Threats and Risks, go to: A-Z Listing of Threats & Risks [ ] Context-sensitive help fails to show 5000 clients as the possible view filter The online help for the Set Display Filter dialog box incorrectly states that only 1000 clients can be shown in the Results per Page. The correct number is [ ] The Schema Reference Guide omits some EVENT_ID descriptions The Server Client Logs 1 and 2 schema should show the following descriptions for the corresponding EVENT_ID values: 23 = Client downloaded globalindex.dax 24 = Client downloaded the Group Update Provider list 25 = Client computer is renamed 26 = When a new client registers, the client is added to the SEM_CLIENT table [ ] Notification area icon appears despite command to close the user interface In the appendix "Using the command-line interface" to the Administration Guide for Symantec Endpoint Protection and Symantec Network Access Control, it states that using the command smc -dismissgui closes the user interface, including the notification area icon.

25 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Resolved issues in this release 25 This is incorrect. The notification area icon still appears. The client still runs and protects the client computer. [ ] Resolved issues in this release Legal Notice You can view a list of resolved issues and component versions at the following location: Copyright 2012 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, LiveUpdate, Sygate, Symantec AntiVirus, Bloodhound, Confidence Online, Digital Immune System, and Norton are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. The Licensed Software and Documentation are deemed to be commercial computer software as defined in FAR and subject to restricted rights as defined in FAR Section "Commercial Computer Software - Restricted Rights" and DFARS , Rights in Commercial Computer Software or Commercial Computer Software Documentation, as applicable, and any successor regulations. Any use, modification, reproduction release, performance, display or disclosure of the Licensed Software and Documentation by the U.S. Government shall be solely in accordance with the terms of this Agreement. SYMANTEC CORPORATION AND/OR ITS AFFILIATES ( SYMANTEC ) IS WILLING TO LICENSE THE LICENSED SOFTWARE TO YOU AS THE INDIVIDUAL, THE COMPANY, OR THE LEGAL ENTITY THAT WILL BE UTILIZING THE LICENSED SOFTWARE (REFERENCED BELOW AS YOU OR YOUR ) ONLY ON THE CONDITION THAT YOU ACCEPT ALL OF THE TERMS OF THIS LICENSE AGREEMENT ( LICENSE AGREEMENT ). READ THE TERMS AND CONDITIONS OF THIS LICENSE AGREEMENT CAREFULLY BEFORE USING THE LICENSED SOFTWARE. THIS IS A LEGAL AND ENFORCEABLE CONTRACT BETWEEN YOU AND SYMANTEC. BY OPENING THE LICENSED SOFTWARE PACKAGE, BREAKING THE LICENSED SOFTWARE SEAL, CLICKING THE I AGREE OR YES BUTTON, OR OTHERWISE INDICATING ASSENT ELECTRONICALLY, OR LOADING THE LICENSED SOFTWARE OR OTHERWISE USING THE LICENSED SOFTWARE, YOU AGREE TO THE TERMS AND CONDITIONS OF THIS LICENSE AGREEMENT. IF YOU DO NOT AGREE TO THESE TERMS AND CONDITIONS, CLICK THE I DO

26 26 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Legal Notice NOT AGREE OR NO BUTTON OR OTHERWISE INDICATE REFUSAL AND MAKE NO FURTHER USE OF THE LICENSED SOFTWARE. UNLESS OTHERWISE DEFINED HEREIN, CAPITALIZED TERMS WILL HAVE THE MEANING GIVEN IN THE DEFINITIONS SECTION OF THIS LICENSE AGREEMENT AND SUCH CAPITALIZED TERMS MAY BE USED IN THE SINGULAR OR IN THE PLURAL, AS THE CONTEXT REQUIRES. 1. DEFINITIONS. Content Updates means content used by certain Symantec products which is updated from time to time, including but not limited to: updated anti-spyware definitions for anti-spyware products; updated antispam rules for antispam products; updated virus definitions for antivirus and crimeware products; updated URL lists for content filtering and antiphishing products; updated firewall rules for firewall products; updated intrusion detection data for intrusion detection products; updated lists of authenticated web pages for website authentication products; updated policy compliance rules for policy compliance products; and updated vulnerability signatures for vulnerability assessment products. Documentation means the user documentation Symantec provides with the Licensed Software. License Instrument means one or more of the following applicable documents which further defines Your license rights to the Licensed Software: a Symantec license certificate or a similar license document issued by Symantec, or a written agreement between You and Symantec, that accompanies, precedes or follows this License Agreement. Licensed Software means the Symantec software product, in object code form, accompanying this License Agreement, including any Documentation included in, or provided for use with, such software or that accompanies this License Agreement. Support Certificate means the certificate sent by Symantec confirming Your purchase of the applicable Symantec maintenance/support for the Licensed Software. Upgrade means any version of the Licensed Software that has been released to the public and which replaces the prior version of the Licensed Software on Symantec s price list pursuant to Symantec s then-current upgrade policies. Use Level means the license use meter or model (which may include operating system, hardware system, application or machine tier limitations, if applicable) by which Symantec measures, prices and licenses the right to use the Licensed Software, in effect at the time an order is placed for such Licensed Software, as indicated in this License Agreement and the applicable License Instrument. 2. LICENSE GRANT. Subject to Your compliance with the terms and conditions of this License Agreement, Symantec grants to You the following rights: (I) a non-exclusive, non-transferable (except as stated otherwise in Section 16.1) license to use the Licensed Software solely in support of Your internal business operations in the quantities and at the Use Levels described in this License Agreement and the applicable License Instrument; and (ii) the right to make a single uninstalled copy of the Licensed Software for archival purposes which You may use and install for disaster-recovery purposes (i.e. where the primary installation of the Licensed

27 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Legal Notice 27 Software becomes unavailable for use). 2.1 TERM. The term of the Licensed Software license granted under this License Agreement shall be perpetual (subject to Section 14) unless stated otherwise in Section 17 or unless You have obtained the Licensed Software on a non-perpetual basis, such as, under a subscription or term-based license for the period of time indicated on the applicable License Instrument. If You have obtained the Licensed Software on a non-perpetual basis, Your rights to use such Licensed Software shall end on the applicable end date as indicated on the applicable License Instrument and You shall cease use of the Licensed Software as of such applicable end date. 3. LICENSE RESTRICTIONS. You may not, without Symantec s prior written consent, conduct, cause or permit the: (I) use, copying, modification, rental, lease, sublease, sublicense, or transfer of the Licensed Software except as expressly provided in this License Agreement; (ii) creation of any derivative works based on the Licensed Software; (iii) reverse engineering, disassembly, or decompiling of the Licensed Software (except that You may decompile the Licensed Software for the purposes of interoperability only to the extent permitted by and subject to strict compliance under applicable law); (iv) use of the Licensed Software in connection with service bureau, facility management, timeshare, service provider or like activity whereby You operate or use the Licensed Software for the benefit of a third party; (v) use of the Licensed Software by any party other than You; (vi) use of a later version of the Licensed Software other than the version that accompanies this License Agreement unless You have separately acquired the right to use such later version through a License Instrument or Support Certificate; nor (vii) use of the Licensed Software above the quantity and Use Level that have been licensed to You under this License Agreement or the applicable License Instrument. 4. OWNERSHIP/TITLE. The Licensed Software is the proprietary property of Symantec or its licensors and is protected by copyright law. Symantec and its licensors retain any and all rights, title and interest in and to the Licensed Software, including in all copies, improvements, enhancements, modifications and derivative works of the Licensed Software. Your rights to use the Licensed Software shall be limited to those expressly granted in this License Agreement. All rights not expressly granted to You are retained by Symantec and/or its licensors. 5. CONTENT UPDATES. If You purchase a Symantec maintenance/support offering consisting of or including Content Updates, as indicated on Your Support Certificate, You are granted the right to use, as part of the Licensed Software, such Content Updates as and when they are made generally available to Symantec s end user customers who have purchased such maintenance/support offering and for such period of time as indicated on the face of the applicable Support Certificate. This License Agreement does not otherwise permit You to obtain and use Content Updates.

28 28 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Legal Notice 6. UPGRADES/CROSS-GRADES. Symantec reserves the right to require that any upgrades (if any) of the Licensed Software may only be obtained in a quantity equal to the number indicated on the applicable License Instrument. An upgrade to an existing license shall not be deemed to increase the number of licenses which You are authorized to use. Additionally, if You upgrade a Licensed Software license, or purchase a Licensed Software license listed on the applicable License Instrument to cross-grade an existing license (i.e. to increase its functionality, and/or transfer it to a new operating system, hardware tier or licensing meter), then Symantec issues the applicable Licensed Instrument based on the understanding that You agree to cease using the original license. Any such license upgrade or cross-grade is provided under Symantec's policies in effect at the time of order. This License Agreement does not separately license You for additional licenses beyond those which You have purchased, and which have been authorized by Symantec as indicated on the applicable License Instrument. 7. LIMITED WARRANTY MEDIA WARRANTY. If Symantec provides the Licensed Software to You on tangible media, Symantec warrants that the magnetic media upon which the Licensed Software is recorded will not be defective under normal use, for a period of ninety (90) days from delivery. Symantec will replace any defective media returned to Symantec within the warranty period at no charge to You. The above warranty is inapplicable in the event the Licensed Software media becomes defective due to unauthorized use of the Licensed Software. THE FOREGOING IS YOUR SOLE AND EXCLUSIVE REMEDY FOR SYMANTEC S BREACH OF THIS WARRANTY PERFORMANCE WARRANTY. Symantec warrants that the Licensed Software, as delivered by Symantec and when used in accordance with the Documentation, will substantially conform to the Documentation for a period of ninety (90) days from delivery. If the Licensed Software does not comply with this warranty and such non-compliance is reported by You to Symantec within the ninety (90) day warranty period, Symantec will do one of the following, selected at Symantec s reasonable discretion: either (i) repair the Licensed Software, (ii) replace the Licensed Software with software of substantially the same functionality, or (iii) terminate this License Agreement and refund the relevant license fees paid for such non-compliant Licensed Software. The above warranty specifically excludes defects resulting from accident, abuse, unauthorized repair, modifications or enhancements, or misapplication. THE FOREGOING IS YOUR SOLE AND EXCLUSIVE REMEDY FOR SYMANTEC S BREACH OF THIS WARRANTY. 8. WARRANTY DISCLAIMERS. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE WARRANTIES SET FORTH IN SECTIONS 7.1 AND 7.2 ARE YOUR EXCLUSIVE WARRANTIES AND ARE IN LIEU OF ALL OTHER WARRANTIES, WHETHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, SATISFACTORY QUALITY, FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT

29 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Legal Notice 29 OF INTELLECTUAL PROPERTY RIGHTS. SYMANTEC MAKES NO WARRANTIES OR REPRESENTATIONS THAT THE LICENSED SOFTWARE, CONTENT UPDATES OR UPGRADES WILL MEET YOUR REQUIREMENTS OR THAT OPERATION OR USE OF THE LICENSED SOFTWARE, CONTENT UPDATES, AND UPGRADES WILL BE UNINTERRUPTED OR ERROR-FREE. YOU MAY HAVE OTHER WARRANTY RIGHTS, WHICH MAY VARY FROM STATE TO STATE AND COUNTRY TO COUNTRY. 9. LIMITATION OF LIABILITY. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW AND REGARDLESS OF WHETHER ANY REMEDY SET FORTH HEREIN FAILS OF ITS ESSENTIAL PURPOSE, IN NO EVENT WILL SYMANTEC OR ITS LICENSORS, RESELLERS, SUPPLIERS OR AGENTS BE LIABLE TO YOU FOR (i) ANY COSTS OF PROCUREMENT OF SUBSTITUTE OR REPLACEMENT GOODS AND SERVICES, LOSS OF PROFITS, LOSS OF USE, LOSS OF OR CORRUPTION TO DATA, BUSINESS INTERRUPTION, LOSS OF PRODUCTION, LOSS OF REVENUES, LOSS OF CONTRACTS, LOSS OF GOODWILL, OR ANTICIPATED SAVINGS OR WASTED MANAGEMENT AND STAFF TIME; OR (ii) ANY SPECIAL, CONSEQUENTIAL, INCIDENTAL OR INDIRECT DAMAGES WHETHER ARISING DIRECTLY OR INDIRECTLY OUT OF THIS LICENSE AGREEMENT, EVEN IF SYMANTEC OR ITS LICENSORS, RESELLERS, SUPPLIERS OR AGENTS HAS BEEN ADVISED SUCH DAMAGES MIGHT OCCUR. IN NO CASE SHALL SYMANTEC S LIABILITY EXCEED THE FEES YOU PAID FOR THE LICENSED SOFTWARE GIVING RISE TO THE CLAIM. NOTHING IN THIS AGREEMENT SHALL OPERATE SO AS TO EXCLUDE OR LIMIT SYMANTEC S LIABILITY TO YOU FOR DEATH OR PERSONAL INJURY ARISING OUT OF NEGLIGENCE OR FOR ANY OTHER LIABILITY WHICH CANNOT BE EXCLUDED OR LIMITED BY LAW. THE DISCLAIMERS AND LIMITATIONS SET FORTH ABOVE WILL APPLY REGARDLESS OF WHETHER OR NOT YOU ACCEPT THE LICENSED SOFTWARE, CONTENT UPDATES OR UPGRADES. 10. MAINTENANCE/SUPPORT. Symantec has no obligation under this License Agreement to provide maintenance/support for the Licensed Software. Any maintenance/support purchased for the Licensed Software is subject to Symantec s then-current maintenance/support policies. 11. SOFTWARE EVALUATION. If the Licensed Software is provided to You for evaluation purposes and You have an evaluation agreement with Symantec for the Licensed Software, Your rights to evaluate the Licensed Software will be pursuant to the terms of such evaluation agreement. If You do not have an evaluation agreement with Symantec for the Licensed Software and if You are provided the Licensed Software for evaluation purposes, the following terms and conditions shall apply. Symantec grants to You a nonexclusive, temporary, royalty-free, non-assignable license to use the Licensed Software solely for internal non-production evaluation. Such evaluation license shall terminate (i) on the end date of the pre-determined evaluation period, if an evaluation period is

30 30 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Legal Notice pre-determined in the Licensed Software or (ii) sixty (60) days from the date of Your initial installation of the Licensed Software, if no such evaluation period is pre-determined in the Licensed Software ( Evaluation Period ). The Licensed Software may not be transferred and is provided AS IS without warranty of any kind. You are solely responsible to take appropriate measures to back up Your system and take other measures to prevent any loss of files or data. The Licensed Software may contain an automatic disabling mechanism that prevents its use after a certain period of time. Upon expiration of the Licensed Software Evaluation Period, You will cease use of the Licensed Software and destroy all copies of the Licensed Software. All other terms and conditions of this License Agreement shall otherwise apply to Your evaluation of the Licensed Software as permitted herein. 12. U.S. GOVERNMENT RESTRICTED RIGHTS. The Licensed Software is deemed to be commercial computer software as defined in FAR and subject to restricted rights as defined in FAR Section "Commercial Computer Licensed Software - Restricted Rights" and DFARS , Rights in Commercial Computer Licensed Software or Commercial Computer Licensed Software Documentation, as applicable, and any successor regulations. Any use, modification, reproduction release, performance, display or disclosure of the Licensed Software by the U.S. Government shall be solely in accordance with the terms of this License Agreement. 13. EXPORT REGULATION. You acknowledge that the Licensed Software and related technical data and services (collectively "Controlled Technology") are subject to the import and export laws of the United States, specifically the U.S. Export Administration Regulations (EAR), and the laws of any country where Controlled Technology is imported or re-exported. You agree to comply with all relevant laws and will not to export any Controlled Technology in contravention to U.S. law nor to any prohibited country, entity, or person for which an export license or other governmental approval is required. All Symantec products, including the Controlled Technology are prohibited for export or re-export to Cuba, North Korea, Iran, Syria and Sudan and to any country subject to relevant trade sanctions. You hereby agree that You will not export or sell any Controlled Technology for use in connection with chemical, biological, or nuclear weapons, or missiles, drones or space launch vehicles capable of delivering such weapons. 14. TERMINATION. This License Agreement shall terminate upon Your breach of any term contained herein. Upon termination, You shall immediately stop using and destroy all copies of the Licensed Software. 15. SURVIVAL. The following provisions of this License Agreement survive termination of this License Agreement: Definitions, License Restrictions and any other restrictions on use of intellectual property, Ownership/Title, Warranty Disclaimers, Limitation of Liability, U.S. Government Restricted Rights, Export Regulation, Survival, and General.

31 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Legal Notice GENERAL ASSIGNMENT. You may not assign the rights granted hereunder or this License Agreement, in whole or in part and whether by operation of contract, law or otherwise, without Symantec s prior express written consent COMPLIANCE WITH APPLICABLE LAW. You are solely responsible for Your compliance with, and You agree to comply with, all applicable laws, rules, and regulations in connection with Your use of the Licensed Software AUDIT. An auditor, selected by Symantec and reasonably acceptable to You, may, upon reasonable notice and during normal business hours, but not more often than once each year, inspect Your records and deployment in order to confirm that Your use of the Licensed Software complies with this License Agreement and the applicable License Instrument. Symantec shall bear the costs of any such audit, except where the audit demonstrates that the Manufacturer s Suggested Reseller Price (MSRP) value of Your non-compliant usage exceeds five percent (5%) of the MSRP value of Your compliant deployments. In such case, in addition to purchasing appropriate licenses for any over-deployed Licensed Software, You shall reimburse Symantec for the auditor s reasonable actual fees for such audit GOVERNING LAW; SEVERABILITY; WAIVER. If You are located in North America or Latin America, this License Agreement will be governed by the laws of the State of California, United States of America. If you are located in China, this License Agreement will be governed by the laws of the Peoples Republic of China. Otherwise, this License Agreement will be governed by the laws of England. Such governing laws are exclusive of any provisions of the United Nations Convention on Contracts for Sale of Goods, including any amendments thereto, and without regard to principles of conflicts of law. If any provision of this License Agreement is found partly or wholly illegal or unenforceable, such provision shall be enforced to the maximum extent permissible, and remaining provisions of this License Agreement shall remain in full force and effect. A waiver of any breach or default under this License Agreement shall not constitute a waiver of any other subsequent breach or default THIRD PARTY PROGRAMS. This Licensed Software may contain third party software programs ( Third Party Programs ) that are available under open source or free software licenses. This License Agreement does not alter any rights or obligations You may have under those open source or free software licenses. Notwithstanding anything to the contrary contained in such licenses, the disclaimer of warranties and the limitation of liability provisions in this License Agreement shall apply to such Third Party Programs CUSTOMER SERVICE. Should You have any questions concerning this License Agreement, or if You desire to contact Symantec for any reason, please write to: (i) Symantec Enterprise Customer Care, 555 International Way, Springfield, Oregon 97477, U.S.A., (ii) Symantec Enterprise Customer Care Center, PO BOX 5689, Dublin 15, Ireland, or (iii) Symantec Enterprise Customer Care, 1 Julius Ave, North Ryde, NSW 2113, Australia ENTIRE AGREEMENT. This License Agreement and any related License Instrument are the complete and exclusive agreement between You and Symantec relating to the Licensed Software and supersede any previous

32 32 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Legal Notice or contemporaneous oral or written communications, proposals, and representations with respect to its subject matter. This License Agreement prevails over any conflicting or additional terms of any purchase order, ordering document, acknowledgement or confirmation or other document issued by You, even if signed and returned. This License Agreement may only be modified by a License Instrument that accompanies or follows this License Agreement. 17. ADDITIONAL TERMS AND CONDITIONS. Your use of the Licensed Software is subject to the terms and conditions below in addition to those stated above You may use the Licensed Software for the number of licensed User(s) and at the Use Levels as have been licensed to You by Symantec herein and as indicated in the applicable License Instrument. Your License Instrument shall constitute proof of Your right to make and use such copies. For purposes of this License Agreement, User(s) means an individual person and/or device authorized by You to use and/or benefits from the use of the Licensed Software, or is the person and/or device who actually uses any portion of the Licensed Software Notwithstanding anything to the contrary contained in this License Agreement, if the Licensed Software is Symantec Endpoint Protection, each running instance (physical and/or virtual) of such Software must be licensed. You create an instance of software by executing the software s setup or install procedure. You also create an instance of software by duplicating an existing instance. References to software include instances of the software. You run an instance of software by loading it into memory and executing one or more of its instructions. Once running, an instance is considered to be running (whether or not its instructions continue to execute) until it is removed from memory Privacy; Data Protection. From time to time, the Licensed Software may collect certain information from the device on which it is installed, which may include: (i) Information regarding installation of the Licensed Software. This information indicates to Symantec whether installation of the Licensed Software was successfully completed and is collected by Symantec for the purpose of evaluating and improving Symantec s product installation success rate. This information will not be correlated with any personally identifiable information. (ii) Information on potential security risks as well as URLs of websites visited that the Licensed Software deems potentially fraudulent. This information is collected by Symantec for the purpose of evaluating and improving the ability of Symantec s products to detect malicious behavior, potentially fraudulent websites and other Internet security risks. This information will not be correlated with any personally identifiable information. (iii) Portable executable files that are identified as malware. These files are submitted to Symantec using the Licensed Software s automatic submission function. The collected files could contain personally identifiable information that has been obtained by the malware without your permission. Files of this type are being collected by Symantec only for the purpose of improving the ability of Symantec s products to detect malicious behavior. Symantec will not correlate these files with any personally identifiable information.

33 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Legal Notice 33 Such automatic submission function may be deactivated after installation by following the instructions in the Documentation for applicable products. (iv) The name given during initial setup to the device on which the Licensed Software is being installed. If collected, the name will be used by Symantec as an account name for such device under which you may elect to receive additional services and/or under which you may use certain features of the Licensed Software. You may change the account name at any time after installation of the Licensed Software (recommended). (v) The International Mobile Equipment Identity (IMEI) and International Mobile Subscriber Identity (IMSI) for the mobile telecommunications device used with the Licensed Software. This information is being collected for the purpose of being able to identify the telecommunications device eligible to receive Content Updates for the Licensed Software. This information will not be correlated with any other personally identifiable information. (vi) Other information used for purposes of analyzing and improving the functionality of Symantec s products. This information will not be correlated with any personally identifiable information. The collected information as set out above is necessary for the purpose of optimizing the functionality of Symantec s products and may be transferred to the Symantec group in the United States or other countries that may have less protective data protection standards than the region in which You are situated (including the European Union), but Symantec has taken steps so that the collected information, if transferred, receives an adequate level of protection. Symantec may disclose the collected information if asked to do so by a law enforcement official as required or permitted by law or in response to a subpoena or other legal process. In order to promote awareness, detection and prevention of Internet security risks, Symantec may share certain information with research organizations and other security software vendors. Symantec may also use statistics derived from the information to track and publish reports on security risk trends. By using the Licensed Software, you acknowledge and agree that Symantec may collect, transmit, store, disclose and analyze such information for these purposes.

34 34 Release Notes for Symantec Endpoint Protection and Symantec Network Access Control, version 11, Release Update 7 MP2 Legal Notice