In what order should an administrator configure the integration between SEDR and Symantec Endpoint Protection in order to maximize their benefits?

To integrate Symantec Endpoint Detection and Response (SEDR) with Symantec Endpoint Protection

(SEP) effectively, the recommended configuration order is ECC, Synapse, then Insight Proxy.

Order of Configuration:

ECC (Endpoint Communication Channel): This establishes the communication layer for SEDR and SEP

integration, which is foundational for data exchange.

Synapse: This integration uses data from ECC to correlate threat intelligence and provide context to

detected threats.

Insight Proxy: Configured last, Insight Proxy adds cloud-based file reputation lookups, enhancing

detection capabilities with reputation scoring.

Why This Order is Effective:

Each component builds on the previous one, maximizing the value of integration by ensuring that

foundational communication (ECC) is established before adding Synapse correlation and Insight

Proxy reputation data.

Reference: Configuring ECC, Synapse, and Insight Proxy in this order is considered best practice for

optimizing integration benefits between SEDR and SEP​.