Symantec Endpoint Protection Manager REST API Reference

2y ago
118 Views
5 Downloads
919.63 KB
247 Pages
Last View : Today
Last Download : 3m ago
Upload by : Rafael Ruffin
Transcription

Symantec Endpoint Protection ManagerSymantec Endpoint Protection Manager REST APIReference1. Overview1.1. About Symantec Endpoint Protection Manager REST APIsSymantec Endpoint Protection Manager includes a set of REST APIs that connect to and perform SymantecEndpoint Protection Manager (SEPM) operations from a remote application, such as Symantec AdvancedThreat Protection (ATP) and Symantec Web Gateway (SWG). You use the APIs if you do not have access toSymantec Endpoint Protection Manager.If you use the Symantec Endpoint Protection cloud portal, REST APIs are supported only for thosefunctions that the cloud portal does not manage.This document is intended for developers who want to write applications that interact with SymantecEndpoint Protection Manager. It explains the basic concepts of Symantec Endpoint Protection Managerproduction APIs. It also provides an overview of the different functions that the API supports.1.1.1. Version informationThe Symantec Endpoint Protection Manager API version is 1.API content is versioned separately from Symantec Endpoint Protection. This version of the SymantecEndpoint Protection Manager API supports Symantec Endpoint Protection 14.file:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]

Symantec Endpoint Protection Manager REST API Reference1.2. Required command componentsYou must have Symantec Endpoint Protection Manager System Administrator privileges to use REST APIcommands.To customize a REST API call, you use the following required components with a tool such as SoapUI orwith a programming language such as PowerShell or Java.ComponentDescriptionURIThe base Uniform Resource Identifer (URI), which is as follows:Host: https://SEPM IP:8446Base path: /sepm/api/v1/SEPM IP represents the IP address or the host name of the Symantec EndpointProtection Manager server.All APIs exposed by Symantec Endpoint Protection Manager carry authenticationtokens and other privileged data. To ensure the confdentiality of the data, theREST APIs are only available over a secure connection.MethodThe method that you use to make the call to the command. Which method you usedepends on the command and what you want to accomplish with the command.Methods include GET, PUT, POST, and DELETE.HeadersSymantec Endpoint Protection Manager REST API commands require thefollowing HTTP headers:Authorization: Bearer UserTokenUserToken represents the token response that the authenticate commandreturns. The authenticate command itself does not require this header.file:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]

Symantec Endpoint Protection Manager REST API ReferenceContent-Type: application/jsonRequestThe request parameters that are appropriate for the command that you want toparametersuse.1.3. Symantec Endpoint Protection Manager API usage examplesYou can use the following examples to familiarize yourself with using APIs with Symantec EndpointProtection Manager.Verify the version of Symantec Endpoint ProtectionAuthenticate to Symantec Endpoint Protection ManagerGet a list of Symantec Endpoint Protection Manager groupsGet fngerprint listsAssign a fngerprint list to a group for system lockdownNOTEYou can send Symantec Endpoint Protection Manager API commands in many differentways. The examples to follow are presented in a raw HTTP format.1.3.1. Verify the version of Symantec Endpoint ProtectionTo verify the version of Symantec Endpoint Protection, enter:GET /sepm/api/v1/versionThe response should be similar to the following:{"API SEQUENCE":"161014002","API //C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]

Symantec Endpoint Protection Manager REST API ReferenceAs a sanity check, you can also enter the following into a web browser, and then compare the results:https://SEPM IP:8446/sepm/api/v1/versionNOTEThe version command is an unauthenticated call.1.3.2. Authenticate to Symantec Endpoint Protection ManagerOnce you authenticate to Symantec Endpoint Protection Manager, you can perform authenticated calls,such as getting a list of Symantec Endpoint Protection Manager groups.To authenticate to Symantec Endpoint Protection Manager, enter the command as an HTTP request:POST /sepm/api/v1/identity/authenticate HTTP/1.1Content-Type: application/json{"username" : "admin","password" : "password","domain" : ""}In this example, admin and password are the user name and password that you use to authenticate toSymantec Endpoint Protection Manager.You should get a response similar to the following:{"domain": "Default","refreshToken": enExpiration": 43199,"role": {"bitMask": 8,"title": "sysadmin"},"adminId": "AF3C39A10A320801000000DBF200C60A",file:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]

Symantec Endpoint Protection Manager REST API Reference"clientId": et": e": "","bannerText": "","username": "admin","fullname": null,"token": ation": 43199,"permissionSet": {"reportingRights": true,"groupRights": true,"siteRights": true,"remoteCommandRights": true,"policyRights": true},}"domainid": "FC1716470A931BA765167FEC6FDA9A5C"Copy the string that appears next to token. In this example, that string is c34692c5-201d-4d94-b0f861ed03383337.You must provide this token for subsequent authenticated calls. The value of token is different for everylogon.1.3.3. Get a list of Symantec Endpoint Protection Manager groupsGetting a list of groups is an authenticated call, so you must use the token you previously copied in theauthorization header. Enter the following HTTP request:GET /sepm/api/v1/groups HTTP/1.1Authorization: Bearer c34692c5-201d-4d94-b0f8-61ed03383337You should get back a list of groups:{"content": [{"id": "EF9C029A0A931BA7246C99C00F39133C",file:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]

Symantec Endpoint Protection Manager REST API Reference"name": "Default Group","description": "","fullPathName": "My Company\\Default Group","numberOfPhysicalComputers": 1,"numberOfRegisteredUsers": 1,"createdBy": "AF3C39A10A320801000000DBF200C60A","created": 1477983046292,"lastModified": 1477983046292,"policySerialNumber": "EF9C-11/08/2016 12:21:22 652","policyDate": 1478607682652,"customIpsNumber": "","childGroups": null,"domain": {"id": "FC1716470A931BA765167FEC6FDA9A5C","name": "Default"},"policyInheritanceEnabled": false},{"id": "4541012E0A931BA7085259C3220013FB","name": "My Company","description": "","fullPathName": "My Company","numberOfPhysicalComputers": 0,"numberOfRegisteredUsers": 0,"createdBy": "AF3C39A10A320801000000DBF200C60A","created": 1477983046292,"lastModified": 1477983046292,"policySerialNumber": "4541-11/08/2016 12:21:22 652","policyDate": 1478607682652,"customIpsNumber": "","childGroups": null,"domain": {"id": "FC1716470A931BA765167FEC6FDA9A5C","name": "Default"},}"policyInheritanceEnabled": false],"size": 25,"number": 0,"totalPages": 1,"lastPage": true,file:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]

Symantec Endpoint Protection Manager REST API Reference"firstPage": true,"sort": [{"direction": "ASC","property": "NAME",}"ascending": true],"totalElements": 2,}"numberOfElements": 21.3.4. Get fngerprint listsTo send a command to get the fle fngerprint list for a specifed whitelist name as a set of hash values,enter the following HTTP request:GET /api/v1/policy-objects/fingerprintsAuthorization: Bearer c34692c5-201d-4d94-b0f8-61ed03383337Content-Type: application/json{"name" : "Whitelist"}The command response would look similar to the following:{"id": "20F543E30ADA144447A5FAAA370633DF","name": "Whitelist","hashType": null,"source": null,"description": "","data": 328583162",file:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]

Symantec Endpoint Protection Manager REST API F4C9381A3B265EC5F1CEF1DEC638E0E9"],}"groupIds": []1.3.5. Assign a fngerprint list to a group for system lockdownTo assign a fngerprint list to a group for system lockdown, use the following HTTP request:PUT /api/v1/groups/{group id}/system-lockdown/fingerprints/{fingerprint id}Authorization: Bearer c34692c5-201d-4d94-b0f8-61ed03383337Content-Type: application/json{"group id" : "EF9C029A0A931BA7246C99C00F39133C","fingerprint id" : "20F543E30ADA144447A5FAAA370633DF"}Substitute actual group ID and fngerprint ID values instead of the examples that are provided forgroup id and fngerprint id.If the request is successful, the HTTP OK code 200 is returned.1.4. Where to get more information1.4.1. REST API documentationYou can obtain the complete list of Symantec Endpoint Protection Manager APIs in the following ways:From the following website:https://apidocs.symantec.com/home/saepFrom a web address, which is hosted on and viewable from the Symantec Endpoint Protection Managerfile:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]

Symantec Endpoint Protection Manager REST API Referenceserver:https://SEPM IP:8446/sepm/restapidocs.htmlFrom the Symantec support site:Symantec Endpoint Protection Manager 14 REST API ReferenceDownload the .zip archive, extract all to a folder, and then view the HTML fle with a web browser.2. Symantec Endpoint Protection Incident Response Use Cases2.1. AuthenticationMost Symantec Endpoint Protection Manager REST API commands require that you frst authenticate.2.1.1. /api/v1/identity/authenticateThe authenticate API authenticates and returns an access token for a valid user.URLhttps:// SEPM IP :8446/sepm/api/v1/identity/authenticateHTTP esThe credentials used to log on toDefaultSchemainbodybodySymantec Endpoint Protection Manager.file:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]UserCredential

Symantec Endpoint Protection Manager REST API ReferencegetBannerquerynoDisplays a logon banner, if confgured.stringThe possible values are TRUE or FALSE.appNamequerynoSpecify an application name to receive astringtoken unique for that app.bodybodynoHttpServletRequestResponse CodesStatusReasonCodeResponseModel200The service successfully processed the web request and returned a result.400The parameters are invalid.401The user that is currently logged on has insufcient rights to execute the webUserTokenmethod, or the user is unauthorized.404The requested resource was not found.500The web service encountered an error while processing the web request.2.2. Create, delete, or update groupsThe following commands allow you to create, delete, or update groups, or get information about groups.2.2.1. /api/v1/groupsGets a listing of groups.URLhttps:// SEPM IP :8446/sepm/api/v1/groupsHTTP Methodfile:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]

Symantec Endpoint Protection Manager REST API SizequerysortquerynonostringThe index page used for returned results. Theintegerdefault page index is 1.(int32)The number of results to include on each page.integerThe default is 25.(int32)The column by which the results are sorted. Thestringdefault is by name.orderquerynoSpecifes whether the results are in ascendingstringorder (ASC) or descending order (DESC).modequerynoThe presentation mode for the results, as a liststring(default) or as a tree.fullPathNamequerynoThe full path name of the group.stringResponse CodesStatusReasonCodeResponseModel200The web service successfully processed the web request and returned a result.400The parameters are invalid.401The user that is currently logged on has insufcient rights to execute the webmethod, or the user is unauthorized.file:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]

Symantec Endpoint Protection Manager REST API Reference404The requested resource was not found.500The web service encountered an error while processing the web request.2.2.2. /api/v1/groups/{groupId}Create a group using POST.GET information for a specifc group.DELETE a specifc group.Update group information using PATCH.URLhttps:// SEPM IP :8446/sepm/api/v1/groups/{groupId}HTTP MethodPOSTParametersNameLocated inRequiredDescriptiongroupidpathyesThe ID of the parent group.stringdomainIdquerynoThe ID of the group’s domain.stringbodybodyyesThe group confguration to be created.GroupPayloadbodybodynoResponse Codesfile:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]DefaultSchemaHttpServletResponse

Symantec Endpoint Protection Manager REST API ReferenceStatus CodeReasonResponse Model201HTTP esThe ID of the group from which to query IdquerynoThe ID of the group’s domain.stringResponse CodesStatusReasonCodeResponseModel200The web service successfully processed the web request and returned a result.400The parameters are invalid.401The user that is currently logged on has insufcient rights to execute the webmethod, or the user is unauthorized.410Cannot fnd the specifed object.500The web service encountered an error while processing the web request.HTTP Methodfile:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]Group

Symantec Endpoint Protection Manager REST API ReferenceDELETEParametersNameLocated e ID of the group to be deleted.stringdomainIdquerynoThe ID of the group’s domain.stringResponse CodesStatus CodeReasonResponse Model204HTTP MethodPATCHParametersNameLocated inRequiredDescriptionDefaultgroupidpathyesThe ID of the group.stringdomainIdquerynoThe ID of the group’s domain.stringbodybodyyesThe group confgurations to be updated.GroupPayloadResponse CodesStatus CodeReason200file:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]Response ModelSchema

Symantec Endpoint Protection Manager REST API Reference2.3. Move a client to a diferent groupUse this command when you want to move a client to a different group.2.3.1. /api/v1/computersChecks and moves a client to the specifed group.URLhttps:// SEPM IP :8446/sepm/api/v1/computersHTTP MethodPATCHParametersNameLocated inRequiredDescriptionbodybodyyesInformation of a computer.DefaultSchemaArray[Computer]Response CodesStatusReasonCodeModel200The web service successfully processed the web request and returned a result.400The parameters are invalid.401The user that is currently logged on has insufcient rights to execute the webmethod, or the user is unauthorized.409ResponseThe request could not be completed due to a confict with the current state of thesource or target group.file:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]Array[]

Symantec Endpoint Protection Manager REST API Reference410Cannot fnd the specifed object.500The web service encountered an error while processing the web request.2.4. Get information about a policyYou can get information about different kinds of policies using these commands.2.4.1. /api/v1/policies/summary/exceptionsGet a list of exception policies that includes the policy ID and and policy name.URLhttps:// SEPM IP :8446/sepm/api/v1/summary/exceptionsHTTP oIf present, get the policies from this , get the policies from the logged-on domain.Response CodesStatusReasonCode200The web service successfully processed the web request and returned aresult.file:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]Response Model

Symantec Endpoint Protection Manager REST API Reference2.4.2. /api/v1/policies/exceptions/{id}Get policy information for a specifc exception policy.URLhttps:// SEPM IP :8446/sepm/api/v1/policies/exceptions/{id}HTTP MethodGETParametersNameLocated inRequiredDescriptionidpathyesThe ID of the exceptions policy to get.DefaultSchemastringResponse CodesStatusReasonResponse ModelThe web service successfully processed the web request and returned aPolicyCode200result.2.4.3. /api/v1/policies/summary/luGet a list of LiveUpdate (lu) policies that includes their ids and names.URLhttps:// SEPM IP e:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]

Symantec Endpoint Protection Manager REST API ReferenceNameLocatedRequiredDescriptionnoIf present, get the policies from this , get the policies from the logged-on domain.Response CodesStatusReasonResponse ModelCode200The web service successfully processed the web request and returned aresult.2.4.4. /api/v1/policies/lu/{id}Get policy information for a specifc LiveUpdate policy.URLhttps:// SEPM IP ersNameLocated inRequiredDescriptionidpathyesThe ID of the LiveUpdate policy to get.DefaultSchemastringResponse CodesStatusReasonResponse ModelThe web service successfully processed the web request and returned aPolicyCode200result.file:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]

Symantec Endpoint Protection Manager REST API Reference2.5. Create and manage an exceptions policyThese commands let you create, manage, delete, and update exception policies.2.5.1. /api/v1/policies/exceptionsCreates a new exceptions policy.URLhttps:// SEPM IP :8446/sepm/api/v1/policies/policies/exceptionsHTTP DefaultSchemainbodybodynoPolicyExceptionsCon letResponseResponse CodesStatus CodeReasonResponse Model2012.5.2. /api/v1/policies/exceptions/{id}GET the exceptions policy by policy id.Modify an existing exceptions policy values with PUT request.file:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]

Symantec Endpoint Protection Manager REST API ReferenceDELETE an existing exceptions policy.Update an exceptions policies by using PATCH.URLhttps:// SEPM IP :8446/sepm/api/v1/policies/exceptions/{id}HTTP MethodGETParametersNameLocated inRequiredDescriptionDefaultidpathyesThe ID of the exceptions policy to get.SchemastringResponse CodesStatus CodeReasonResponse Model200The operation completed.PolicyHTTP on fgurationExceptionsLockedOptionsThe ID offile:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]string

Symantec Endpoint Protection Manager REST API Referencetheexceptionspolicy toedit.Response CodesStatus CodeReasonResponse Model200The operation completed.HTTP MethodDELETEParametersNameLocated inRequiredDescriptionDefaultidpathyesThe ID of the exceptions policy to delete.Response CodesStatus CodeReasonResponse Model200The operation completed.HTTP nDefaultinfile:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]SchemaSchemastring

Symantec Endpoint Protection Manager REST API ReferencebodybodynoidpathyesPolicyExceptionsCon fgurationExceptionsLockedOptionsThe ID ofstringtheexceptionspolicy toupdate.Response CodesStatus CodeReasonResponse Model200The operation completed.2.6. Apply a policy to a group based on locationThese commands let you get a list of groups, a list of locations for a specifc group, or assign a policy to agroup location.2.6.1. /api/v1/groupsGets a list of groups.URLhttps:// SEPM IP :8446/sepm/api/v1/groupsHTTP nfile:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]DefaultSchema

Symantec Endpoint Protection Manager REST API ysortquerynonostringThe index page used for returned results. Theintegerdefault page index is 1.(int32)The number of results to include on each page.integerThe default is 25.(int32)The column by which the results are sorted. Thestringdefault is by name.orderquerynoSpecifes whether the results are in ascendingstringorder (ASC) or descending order (DESC).modequerynoThe presentation mode for the results, as a liststring(default) or as a tree.fullPathNamequerynoThe full path name of the group.stringResponse CodesStatusReasonCodeResponseModel200The web service successfully processed the web request and returned a result.400The parameters are invalid.401The user that is currently logged on has insufcient rights to execute the webmethod, or the user is unauthorized.404The resource requested was not found500The web service encountered an error while processing the web request.2.6.2. /api/v1/groups/{groupId}/locationsfile:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]Group

Symantec Endpoint Protection Manager REST API ReferenceGet information about Symantec Endpoint Protection Manager locations for a specifc group.URLhttps:// SEPM IP :8446/sepm/api/v1/groups/{groupId}/locationsHTTP MethodGETParametersNameLocated e ID of the group from which to query locations.stringdomainIdquerynoThe ID of the group’s domain.stringResponse CodesStatusReasonCodeResponseModel200The web service successfully processed the web request and returned a result.400The parameters are invalid.401The user that is currently logged on has insufcient rights to execute the webmethod, or the user is unauthorized.410Cannot fnd the specifed object.500The web service encountered an error while processing the web request.2.6.3. /api/v1/groups/{group id}/locations/{location id}/policies/{policy type}Assign a policy to a given location within a group.file:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]Group

Symantec Endpoint Protection Manager REST API ReferenceNOTEOnly location-specifc policies can be assigned to a location.URLhttps:// SEPM IP :8446/sepm/api/v1/groups/{group id}/locations/{location id}/policies/{policy type}HTTP efaultyesThe ID of the group to which the policy isSchemaingroup idpathstringbeing assigned.location idpathyesThe ID of the location to which the policystringis being assigned. To assign policy todefault location, default can also be usedinstead of location ID.policy typepathyesThe type of the Policy to assign.stringbodybodyyesJSON object containing ID of the policy toMetadataAttributesbe assigned. e.g. {"id":"some GUID"}Response CodesStatus CodeReason2002.7. Assign a Firewall or IPS policy to a groupfile:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]Response Model

Symantec Endpoint Protection Manager REST API ReferenceThese commands let you get a list of Firewall or IPS policies, and then assign those policies to a specifedgroup.2.7.1. /api/v1/policies/summary/fwGets a list of Firewall policies that includes the policy IDs and the policy names.URLhttps:// SEPM IP eLocatedRequiredDescriptionDefaultnoIf present, get the policies from this domain.SchemaindomainIdqueryOtherwise, get the policies from the logged-on domain.Response CodesStatus CodeReasonResponse Model2002.7.2. /api/v1/policies/summary/ipsGet a list of IPS policies that includes the policy IDs and the policy names.URLhttps:// SEPM IP le:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]string

Symantec Endpoint Protection Manager REST API ReferenceNameLocatedRequiredDescriptionDefaultnoIf present, get the policies from this domain.SchemaindomainIdquerystringOtherwise, get the policies from the logged-on domain.Response CodesStatus CodeReasonResponse Model2002.7.3. /api/v1/groups/{group id}/policies/{policy type}Assign a policy to a group.URLhttps:// SEPM IP :8446/sepm/api/v1/{group id}/policies/{policy type}NameLocatedRequiredDescriptionDefaultyesThe ID of the group to which the policy isSchemaingroup idpathstringbeing assigned.policy typepathyesThe type of the Policy to assign.stringbodybodyyesJSON object containing ID of the policy toMetadataAttributesbe assigned. e.g. {"id":"some GUID"}.Response CodesStatus CodeReason200file:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]Response Model

Symantec Endpoint Protection Manager REST API Reference2.8. Generate an alert when a specifed fle appearsThese commands let you create a new exception policy to defne which fle (or fles) to monitor, getinformation related to the alerts generated by that exceptions policy, and then to acknowledge that specifcevent.2.8.1. /api/v1/policies/exceptionsCreates a new exception policy.https:// SEPM IP :8446/sepm/api/v1/policies/exceptionsHTTP DefaultSchemainbodybodynoPolicyExceptionsCon letResponseResponse CodesStatus CodeReason2012.8.2. /api/v1/events/criticalGets information related to critical events.file:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]Response Model

Symantec Endpoint Protection Manager REST API ReferenceURLhttps:// SEPM IP :8446/sepm/api/v1/events/criticalHTTP oThe source from which to get information. NotDefaultSchemainsourcequerystringcurrently used.pageIndexpageSizequeryquerynonoThe index page used for returned results. Notintegercurrently used.(int32)The number of results returned for each page. Notintegercurrently used.(int32)Response CodesStatusReasonResponse ModelThe web service successfully processed the web request and returned aCriticalEventsResponseCode200result.400The parameters are invalid.401The user that is currently logged on has insufcient rights to execute theweb method, or the user is unauthorized.404The requested resource was not found.file:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]

Symantec Endpoint Protection Manager REST API Reference500The web service encountered an error while processing the web request.2.8.3. /api/v1/events/acknowledge/{eventID}Acknowledges a specifed event for a given event ID.URLhttps:// SEPM IP :8446/sepm/api/v1/events/acknowledge/{eventID}HTTP MethodPOSTParametersNameLocated inRequiredDescriptioneventIDpathyesThe event ID to acknowledge.DefaultSchemastringResponse CodesStatusReasonCodeResponseModel200The web service successfully processed the web request and returned a result.400The parameters are invalid.401The user that is currently logged on has insufcient rights to execute the webmethod, or the user is unauthorized.404The requested resource was not found.500The web service encountered an error while processing the web request.file:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]

Symantec Endpoint Protection Manager REST API Reference2.9. Add or remove network quarantine statusYou can add to or remove endpoints from the network quarantine with this command.2.9.1. /api/v1/command-queue/quarantineSends a command from Symantec Endpoint Protection Manager to add Symantec Endpoint Protectionendpoints to (or remove them from) network quarantine.URLhttps:// SEPM IP :8446/sepm/api/v1/command-queue/quarantineHTTP yesThe list of groups on which to run theDefaultSchemaingroup idsquerystringcommand.computer idsqueryyesThe list of computers on which to runstringthe command.undoquerynobodybodynoIf set to true, will undo quarantine.booleanHttpServletRequestResponse CodesStatusReasonCodefile:///C/API Project/old apidocs html pages/Symantec Endpoint Protection Manager REST API Reference.html[7/7/2021 3:19:11 PM]ResponseModel

Symantec Endpoint Protection Manager REST API Reference200The web service successfully processed the web request and returned a result.400The para

Endpoint Protection Manager (SEPM) operations from a remote application, such as Symantec Advanced Threat Protection (ATP) and Symantec Web Gateway (SWG). You use the APIs if you do not have access to Symantec Endpoint Protection Manager. If you use the Symantec Endpoint Protection

Related Documents:

Installing Symantec Endpoint Protection Manager on the Amazon EC2 platform Symantec Endpoint Protection Manager is installed by deploying the Symantec Endpoint Protection Manager AMI (Amazon Machine Image) from AWS Marketplace. Symantec Endpoint Protection Manager AMI can be

3. Symantec Endpoint Protection Manager 4. Symantec Endpoint Protection Client 5. Optional nnFortiClient EMS For licenses to Symantec Endpoint Protection, please contact Symantec’s respective sales team. NOTE: This guide is pertinent to the integration between the relevant portions of the FortiGate, the FortiClient, and Symantec Endpoint .

clients and is configured with Symantec Endpoint Protection Manager Console. The Symantec Endpoint Protection client is installed on the scan nodes, which are used to protect the file data that resides on SONAS. Symantec Endpoint Protection Manager Console lets users centrally manage Symantec Endpoint Protection clients, known as . scan nodes

1. Open Symantec Endpoint Protection Manager. The Symantec Endpoint Protection Manager window appears. 2. On the left side of the Symantec Endpoint Protection Manager window, select the Clients icon. 3. In the Tasks list in the lower left area of the window, select Install a client. The Client Deployment Wizard dialog box appears.

Keywords: Symantec , antivirus, endpoint protection 1.2 Overview The TOE is Symantec Endpoint Protection Version 11.0, which delivers a comprehensive antivirus/endpoint security solution with a single agent and a single, centralized management console. Symantec Endpoint Protection

TOE Identifier Symantec Endpoint Protection (SEP) TOE Software Version Version 14.2 TOE Developer Symantec Corporation Key Words Endpoint Security, Client, Application, Cyber Defense Table 1 TOE/ST Identification 1.2 TOE Overview The Symantec Endpoint Protection client (hereafter referred to as the TOE or SEP) is a multifaceted endpoint threat .

Symantec Endpoint Protection . Endpoint Protection Manager: v11.600.550 Symantec Endpoint Protection: v11.6000.550 . Sophos Endpoint Security and Data Protection . Enterprise Console: v4.0.0.2362 Endpoint Security and Control: v9.05 . Trend Micro Worry-Free Business Security: Standard Edition . Worry-Free Business Security: v6.0 SP2 build 3025

accounting purposes, and are rarely designed to have a voting equity class possessing the power to direct the activities of the entity, they are generally VIEs. The investments or other interests that will absorb portions of a VIE’s expected losses or receive portions of its expected residual returns are called variable interests. In February 2015, the Financial Accounting Standards Board .