Endpoint Protection

Hi,

In order to patch against the recent vunrability discovered in some Symatec products, we have this week been slowely pushing out the latest version to our client machines.

Just over half of our 500 odd machines have been fine with the update, however we have started getting reports of some machines no longer being able to connect to the network.

We narrowed it down to this new client. The old one installs and everything works fine, but this new one, although it seems ok on the client, the machine just cant talk out. The NIC gets an IP from DHCP, but then you can see the NIC switching from connected to disconnected and to "No Internet Access" etc.

Has anyone else had this issue and if so, any ideas how to fix? As a healthcare provider, we need and have been asked to confirm by our clients, that we are on the latest version that is patched agianst the vunrability. So we are in a bit of a pickle being unable to continue the upgrade process at present...

Thanks,

​Rich

Haven't seen this yet and we've rolled out to thousands of clients.

Have you tried disabling NTP (firewall and IPS) to see if that is the issue?

Aside from that, you should get support on the phone, they will want advanced debugging and pcaps if this can be easily reproduced.

I ahvent yet, although if it was a policy setting on the firewall etc, then all clients would have been affected a long time ago, even on the older versions as well as this not being an affect on only SOME clients that have updated this week?

Perhaps, but, maybe there were other issues with those clients that just came to light now with the upgrade. Not really sure. Support may need to get on your machine and get logging and pcaps.

I am a bit confused with the versioning here.

Why is it 12.1.6 MP5, when the version numver is (12.1.7004.6500)?

Anyone know what is the correct version? 12.1.6 MP5 or 12.1.7 MP5?

Thanks,

DM

it's 12.1 RU6 MP5

check this article https://support.symantec.com/en_US/article.INFO3801.html