On June 27, 2017, there were multiple public reports of an ongoing large-scale cyberattack involving a variant of the ransomware named Petya. These attacks are targeting and have affected users in various countries across the globe.
Symantec Data Center Security: Server Advanced IPS provides protection against Petya Ransomware. All three levels of Symantec DCS:SA policies Windows 6.0 Basic, Hardening and Whitelisting as well as all 5.2.9 policies (Limited Execution, Strict, and Core) prevents the initial infection into an environment however analysis is still ongoing to insure all methods of lateral movement are also blocked. What is known is Eternal Blue and MimiKatz based approaches would be stopped however researchers are still investigating lateral movement approachs within the malware. As more information is known this blog will be updated.
For more information about Petya, see Symantec's Petya Outbreak page.
What protections does Symantec provide for our endpoint customers?
IPS policies prevent Mimikatz from attacking LSASS.