Processes and Services used by Symantec Endpoint Protection

Article:TECH102748  |  Created: 2007-01-29  |  Updated: 2012-06-22  |  Article URL http://www.symantec.com/docs/TECH102748
Article Type
Technical Solution


Environment

Issue



What are the processes that Symantec Endpoint Protection uses?


What services are used by Symantec Endpoint Protection?


Solution



Services used by Symantec:




    Symantec Embedded Database

    Embedded database used by Symantec Endpoint Protection Manager.

    Symantec Endpoint Protection

    Provides virus-scanning for Symantec Endpoint Protection.

    Symantec Endpoint Protection Manager

    Application server which communicates with Symantec Endpoint Protection Manager consoles.

    Symantec Event Manager

    Event propagation and logging service.

    Symantec Management Client

    Provides communication with the Symantec Endpoint Protection Manager. Controls the SMC.exe & SMCGui.exe processes.

    Symantec Network Access Control

    Checks that the computer complies with the defined security policy and communicates with the Symantec Enforcers and/or Symantec Endpoint Protection manager to allow your computer to access the network.

    Symantec Settings Manager

    Settings storage and management service.


Processes used by Symantec




    SymCorpUI.exe

    This is the user interface of Symantec Endpoint Protection. If you open the user interface and then end the SymCorpUI.exe process, the user interface closes.

    ccSvcHst.exe

    A Common Client component that affects Auto-Protect, Event Manager and Internet Email tools.

    ccApp.exe

    A Common Client component that affects Auto-protect and Internet Email tools.

    LUALL.exe

    The LiveUpdate process that connects to the Symantec LiveUpdate servers.

    SMC.exe

    This is the client. Controls the client-manager communication, location detection, and is the non-driver portion of Network Threat Protection.

    SMCgui.exe

    Client interface.

    Rtvscan.exe

    Virus scanner process for manual scans, scheduled scans, email tools.

    LuComServer.exe

    Symantec Endpoint Protection's interface to LiveUpdate. Symantec Endpoint Protection runs it to enable or disable content, which happens every policy update, and to query content versions.
    ProtectionUtilSurrogate.exe This component allows the 64 bit SmcGui process to access 32bit processes, such as RtvScan and SymCorpUI.



 



Legacy ID



2007102906283148


Article URL http://www.symantec.com/docs/TECH102748


Terms of use for this information are found in Legal Notices