Endpoint Protection

 View Only
  • 1.  Endpoint Protection blocks internet activity every few minutes

    Posted Nov 09, 2012 12:33 PM

    I have Symantec Endpoint Protection version 11.0.6005.562 that I purchased through my University as a student.  For the last few months, I have continuously had the following issue: When accessing websites of all kinds, Symantec will periodically (every 5-10 minutes) I receive a notification like this or similar to it .  Followed by a notification saying "Denial of service logged."  After this, my internet connection is completely blocked for several minutes.  Since this happens every few minutes, it prevents me from getting anything done on the internet.  

    Please advise as to the best way to deal with this issue.  Thank you.



  • 2.  RE: Endpoint Protection blocks internet activity every few minutes

    Posted Nov 09, 2012 01:27 PM

    its blocked by your Network intrusion system. disable it or modify the time as per this document.

     

    http://www.symantec.com/business/support/index?page=content&id=TECH105013&locale=en_US



  • 3.  RE: Endpoint Protection blocks internet activity every few minutes

    Posted Nov 09, 2012 01:33 PM

    This was a bug in this version of SEP. This traffic is coming from a Comcast DNS server. You can disable Denial of Service protection although this isn't recommended.

    Do you have the opportunity to upgrade to a newer version?

    Since you're running the unmanaged version you can't add an exception.



  • 4.  RE: Endpoint Protection blocks internet activity every few minutes

    Posted Nov 09, 2012 01:54 PM

    Documentation regarding RU6/RU6a detections of DNS server detections. I would recommend moving to RU6 MP1 or newer to resolve this issue.

     

    http://www.symantec.com/docs/TECH132161



  • 5.  RE: Endpoint Protection blocks internet activity every few minutes

    Broadcom Employee
    Posted Nov 12, 2012 02:47 AM

    Hi,

    Can you ask the university admin to provide you the latest SEP version?

    Also, you should have all the SEP feature installed i.e. Antivirus & Antispyware , Proactive Threat Protection (PTP), Network Threat Protection (NTP).

    All the features should have latest definitions.

    Make sure operating system is updated with Microsoft updates and having latest service pack.

    Disable autorun.