Endpoint Protection

 View Only
Expand all | Collapse all

Deactivation doesn't work correctly

Rafeeq

RafeeqMar 25, 2011 07:01 AM

  • 1.  Deactivation doesn't work correctly

    Posted Mar 25, 2011 04:49 AM

    Hi!

    When I try to stop the Symantec Endpoint Protection Service, it stops. But after 3-5 minutes, the service activates him self. But the automaticly activation is set to 30 minutes..

    How can I deactivate the Symantec Endpoint Protection Service (the antivirus) and activate it after 30 minutes..?

    Regards



  • 2.  RE: Deactivation doesn't work correctly

    Broadcom Employee
    Posted Mar 25, 2011 04:59 AM

    In Antivirus and Antispyware policy (File System Auto-Protect -> Advanced tab) you have the option:

    When Auto-Protect is disabled: enable after ... minutes

    I think you are searching for this settings.

    However, I would recommend not changing this option for security reasons



  • 3.  RE: Deactivation doesn't work correctly

    Posted Mar 25, 2011 05:32 AM

    that's what is set up, but it doesn't work.. it will be activated after 3 or 5 minutes..

    I need this, that I can deactivate the antivirus client to make tests or install something.. it works in the version 10. there I can stop (as administrator) the antivirus service and after 30 minutes, it activates automaticly.. Is this not possible in the new version?

    Regards 



  • 4.  RE: Deactivation doesn't work correctly

    Broadcom Employee
    Posted Mar 25, 2011 05:35 AM

    What is the Symantec Endpoint Protection version you have installed?

    I will test it on my RU6 MP3 (11.0.6300.803).



  • 5.  RE: Deactivation doesn't work correctly

    Broadcom Employee


  • 6.  RE: Deactivation doesn't work correctly

    Broadcom Employee
    Posted Mar 25, 2011 05:42 AM

    It seems that you need to lock the padlock (if it's open, the service restarts very quickly) which is next to "When Auto-Protect is disabled"



  • 7.  RE: Deactivation doesn't work correctly

    Trusted Advisor
    Posted Mar 25, 2011 05:55 AM

    Hello,

    The Steps below are not recommended, however worth a try.

    Symantec Strongly recommends leaving Auto-protect to load at system startup due to the threat of network aware infectors that have the ability to compromise a machine before a user logs on.

    How to configure when Auto-protect loads for Symantec Endpoint Protection managed clients:

    1. Launch the Symantec Endpoint Protection Manager.
    2. Select the Policies tab in the left-hand pane.
    3. Under "View Policies" select AntiVirus and Antispyware
    4. In the right-hand window, select the policy that you wish to change Auto-protect's loading order for, then in the "Tasks" section, select Edit the policy.
    5. In the left-hand column, select File System Auto-Protect
    6. Select the Advanced tab
    7. In the "Startup and Shutdown" section you will be able to specify when Auto-Protect loads.

    Check the Screen Shot and check if that works for you.


     

     

    Other factors that impact boot times:

    By default, Symantec AntiVirus and Symantec Endpoint Protection run a startup quick-scan of the file system at system startup which is a low impact scan of common areas infectors are found.

    How to disable/enable Startup and Quick Scans within the Symantec Endpoint Protection Manager

    http://www.symantec.com/business/support/index?page=content&id=TECH103044

     

     



  • 8.  RE: Deactivation doesn't work correctly

    Posted Mar 25, 2011 05:57 AM

    its the version 11.0.6200.754 MP2..

     

    @pete_4u2002: it is setting up correctly:

     

    http://s1.directupload.net/images/110325/7vk669zp.jpg

    But on the clients it doesn't work. I cannot deactivate Symantec Endpoint Protection over the tray icon, because the, on German, "Netzwerkbedrohungsschutz" is activated.

     

    MFG



  • 9.  RE: Deactivation doesn't work correctly

    Broadcom Employee
    Posted Mar 25, 2011 06:17 AM

    have the clients updated with the policy applied on the group?



  • 10.  RE: Deactivation doesn't work correctly

    Posted Mar 25, 2011 06:19 AM

    Yes, they are updated (on the client system protocol I can see the times of the updated policy)..



  • 11.  RE: Deactivation doesn't work correctly

    Posted Mar 25, 2011 06:56 AM

    all these settings are for real time scan ( autoprotect , which runs inside the rtvscan.exe)

    There is no such option to reactive after 30 mins.

    You can stop it from the services.msc



  • 12.  RE: Deactivation doesn't work correctly

    Posted Mar 25, 2011 06:59 AM

    yes, I can stop it there, but I want to automaticly reactivate it after 30 minutes.. is this not possible?



  • 13.  RE: Deactivation doesn't work correctly

    Posted Mar 25, 2011 07:01 AM

    No....



  • 14.  RE: Deactivation doesn't work correctly

    Posted Mar 25, 2011 07:35 AM

    Rafeeq, if I can reactivate AutoProtect after 5 minutes, why not after 30 minutes? Online help says valid values are between 3 and 60 minutes.