BSOD on SEP Symantec products, Glad you run mcafee today?

[SWISS]

Kind of happy today we don't manage SEP customers. I liked their products a lot when i managed customers in Enterprise with Sep. They don't seem very lucky the last few months.

Mcafee on the other side JUST ships new Exploit IPS rules in ENS by default OFF/DISABLED. Very usefull in a 0day world that never sleeps?

To be honest this path we don't like and the Risk is then with the customer instead of Mcafee.

An old discussion often discussed with several people from Mcafee Marketing and Pre Sales here in Switzerland.

https://support.symantec.com/us/en/article.TECH256643.html

https://www.theregister.co.uk/2019/10/15/ye_olde_blue_screen_of_death_is_back_this_time_a_bad_symant...

[Former Member]

Thanks for sharing. 

In regards to the Exploit Rules which come disabled by default, this was a decision taken by the product management team so that customers aren't forced to use the rules added. It is advised to test these rules within your own environment to ensure no unexpected issue occur. You can see all the newly added rules in the Exploit Prevention Content Release Notes and we advise you review these on each release and decide for yourself which ones you wish to implement. We would have far more complaints, if we forced customers to use rules unexpectedly.