I do not need a solution (just sharing information)
Hello,
I've read from one of your blog posts that the SEP14 memory exploit mitigation is signature-less (https://www.symantec.com/connect/blogs/exploit-pre...)
"Symantec Endpoint Protection (SEP) exploit prevention is called Memory Exploit Mitigation. It is signature-less, instead using an understanding of exploit behavior to pre-emptively block zero-day exploits."
However, from your support site: https://support.symantec.com/en_US/article.HOWTO125353.html, says that the exploit prevention is part of IPS and it downloads a separate signature along with Intrusion Prevention content.
Can you shed some light on this?
Regards,
SMRenan
0