Endpoint Protection

 View Only

  • 1.  12.1.4 Errors due to intrusion prevention component.

    Posted Dec 11, 2014 07:50 PM
      |   view attached

    Multipe un-managed servers getting the following errors with Symantec Endpoint Protection.

    • Download Insight is not functioning correctly due to an intrusion prevention component.
    • Proactive threat Protection is not functioning correclty due to an intrusion prevention component.

    Servers will not shut down gracefully, but hard boot seems to fix. 

    Intrusion Prevention Signatures 141211011 seems to have fixed on x86 server, but not x64.

    -xmctech

     



  • 2.  RE: 12.1.4 Errors due to intrusion prevention component.

    Posted Dec 11, 2014 07:53 PM

    Does the reboot correct this? What's the exact version?

    See if this applies; I'm wondering if it's causing issues...

    New Features in Client Intrusion Detection System (CIDS) 14.1



  • 3.  RE: 12.1.4 Errors due to intrusion prevention component.

    Posted Dec 11, 2014 07:59 PM

    Yes,

    So far no issue after a reboot, but rebooting multiple production servers isn't a viable solution.  The exact version is 12.1.4013.4013.

    -xmctech



  • 4.  RE: 12.1.4 Errors due to intrusion prevention component.

    Posted Dec 11, 2014 08:01 PM

    May want to log a support case to see if the defs are the problem or the new engine



  • 5.  RE: 12.1.4 Errors due to intrusion prevention component.

    Posted Dec 11, 2014 08:07 PM

    Thx,

    Been on the phone with them off an on all day.

    -xmctech



  • 6.  RE: 12.1.4 Errors due to intrusion prevention component.

    Posted Dec 12, 2014 04:21 AM

    Try cleanwipe and install RU5 on a test...