Endpoint Protection

 View Only
  • 1.  Anyone know SEP 11 MR6 is compatible with teamed network cards

    Posted Apr 19, 2012 06:14 PM

    We experienced broadcast after installing SEP10. mr2 on a server (win2K3 R2)with teamed cards enabled a few years back .

    I just wonder whether it is still an issue with teamed card for SEP 11.0?

     

    What need to be excluded for SQL server 2012 cluster with teamed /bridged network cards?????

     



  • 2.  RE: Anyone know SEP 11 MR6 is compatible with teamed network cards

    Trusted Advisor
    Posted Apr 19, 2012 11:40 PM

    Hello,

    We haven't seen any issues being reported with the SEP 11.0.7101 (Latest version) in reference to the Teamed NIC's.

    It is always advisable for you to install the Latest version of SEP 11.x on your machines. (Latest version)

    In reference to the exclusions, check this Article:

    How to exclude MS SQL files and folders using Centralized Exceptions

    http://www.symantec.com/docs/TECH105240

    Check this Thread:

    https://www-secure.symantec.com/connect/forums/recommended-exclusions-servers-sep

    Hope that helps!!

     



  • 3.  RE: Anyone know SEP 11 MR6 is compatible with teamed network cards

    Posted Apr 20, 2012 11:29 AM

    thank you for your advise.

     

    We did have exclusion set up but not sure about how to exclude the temaed NICs. AS I understand it shoudl be fine if we don't have symantec firewall and network protection installed.

     

    We only install antivirus and antispyware protection on servers.



  • 4.  RE: Anyone know SEP 11 MR6 is compatible with teamed network cards

    Posted Apr 20, 2012 11:51 AM

    We haven't had any issues with it.



  • 5.  RE: Anyone know SEP 11 MR6 is compatible with teamed network cards

    Posted Apr 20, 2012 12:38 PM

    We did face issues. The workaround was

    disable teaming

    install SEP

    enable teaming.



  • 6.  RE: Anyone know SEP 11 MR6 is compatible with teamed network cards

    Posted Apr 21, 2012 06:06 PM

    We still face this issue. Before I continue to explain some articles from Symantec.

    All of those articles have the same solution as NRaj above, disable/uninstall NIC teaming, install SEP with NTP, enable/install NIC teaming. Problem with this solution is, it's manual & one server at a time. What happens when you push the auto upgrade button for that group of machines? Using some sort of software deployment, do you always have to have an exclusion list for those servers with NIC teaming?

    One suggestion by a Symantec Support Engineer was to install SEP with out NTP first & then add NTP later.

    To give you some more detail about our environment.

    • IBM hardware
    • Intel NIC & teaming software = No problem
    • Broadcom NIC & BACS v2 teaming software = No problems
    • Broadcom NIC & BACS v3 teaming software = Problems. Server can communicate out, but nothing can communicate in. Generally, immediately rebooting the server helps. Sometimes you have to go through the whole rigmarole or uninstalling/reinstalling either SEP or BACS.
    • Broadcom NIC & BACS v4 teaming software = Unknown. Still testing.
    • All above situations are an upgrade from RU5 to RU6 MP3.

     



  • 7.  RE: Anyone know SEP 11 MR6 is compatible with teamed network cards

    Posted Apr 21, 2012 06:11 PM

    You can't exclude NICs from scanning. You exclude files & processes from being scanned.

    Are you asking that NTP not be active on one NIC, but active on the second NIC in the same machine?