Case and point! Its completely annoying how many times we add a new environment into a xenapp farm or server environment and we need to disable HIDS simply because we have no freaking idea what the application is doing. Dont let the name – Heuristic Intrusion Detection Software fool you because it can block more than you want (and often does)!  As far as we are concerned, this is a must in your troubleshooting logic, and for testing ports, new software, etc…

So to that note, to disable HIDS in your x64 environment - run the following command.
C:\Program Files (x86)\symantec\Critical System Protection\Agent\IPS\bin\SISIPSService -i

To disable HIDS in your x86 environment – run the following command
C:\Program Files\symantec\Critical System Protection\Agent\IPS\bin\SISIPSService -i

Surely this will help you in your quest to get to the bottom of root cause analysis (RCA). We all know symantec has evolved into the black hole to us engineers, much like the network. Enjoy and please look at your firewall rules next in the event this fails. And make sure your turn Symantec HIDS back on when you are done.

 

Users start to get completely annoyed every time they launch either a published application or a website locally on their desktop that happens to not have a certificate issued by a trusted certificate authority. So the question is how do you disable this prompt and trust the certificate if the site is indeed trustworthy.

  1. things to know
    1. adding to trusted sites will not help
  2. how to correct
    1. on your server 2008 r2 server open gpedit.msc.
    2. start > run > gpedit.msc
    3. expand “computer configuration”
    4. expand “administrative templates”
    5. expand “system”
    6. expand “Internet communication management” and click on “Internet communication settings”
    7. locate and open “turn off automatic root certificates update” and click on the “enabled” radial and click on “ok”
    8. run gpupdate
    9. start > run > gpupdate /force
  3. jnlp and java based applications
    1. associate the jnlp file with your javaw.exe and launch directly to bypass the certificate prompt.
© 2012 random technology [RT] technology documentation

Optimized by SEO Ultimate