Endpoint Protection

We have several users who are using Firefox 35.0.1 and we have just pushed out 12.1.5 to these users. Out of about 300 clients so far we have around a dozen who say that Firefox won't start after upgrading to 12.1.5. The users previoulsy had 11.x so they never had the Browser Intrusion Prevention component before. I have FF 35.0.1 and SEP 12.1.5 working on all of my systems but these few clients are not able to get it to start. It will show up in the process list but they never get any GUI. I have moved these clients to a special group and disabled Browser Intrusion Prevention and this has solved their problem.

I have seen the page which lists browser compatibility and note that FF version 34+ isn't listed so know I can't expect compatibility. But is there any reason it would work on a majority of systems but behave like it does on just a few systems? Is there any chance of enchanced browser support coming from Symantec anytime soon? These users need Firefox to work for projects they are working on so I had no choice but to disable BIP for them.

http://www.symantec.com/business/support/index?page=content&id=TECH174537

There hasn't been much else mentioned about compatability. It shouldn't cause a problem even though not officially supported.

Is there any special about these machines compared to the others?

At this point disabling may be the only answer since it's not officially supported...

Supported Browser versions for Browser Intrusion Prevention for Symantec Endpoint Protection 12.1.x

We have about 350 Windows clients with Firefox 35.0.1 with either SEP 12.1.5 or 12.1.4 without any issues with the Browser Intrusion Prevention (or any other issues with Firefox), but they all had SEP 12.1.5 or 12.1.4 before getting Firefox 35.0.1.

Have you tried moving these clients back to their normal SEP group with the Browser Intrusion Prevention component enabled after verifying that Firefox 15.0.1 works in the special SEP group you created?

Unfortunately I don't have much other than the version of Firefox being used. Though it's only affecting a small number of users they don't seem to have much in common. I'm trying to get my hands on one of the workstations but most of the users are remote and the local users are to busy to let me troubleshoot. Once I disabled the BIP they can't be bothered to help.

Strange thing is that since December 2014 (CIDS engine 14.1.2), on all SEP 12.1 versions BIPS should work independent of the browser version:

New Features in Client Intrusion Detection System (CIDS) 14.1

Perhaps you should check the version number of the CIDS engine on these clients. AFAIK there is no report for this, so go to Help > Troubleshooting > Versions. There should be the version number (on my fresh client it's 14.1.2.8).