Endpoint Protection

My Question is:

• If we don't use any firewall policies on our clients do we need to have the firewall component installed? 
• If we remove the firewall component from NTP will that have any effect on Intrusion Protection? 

The reason I ask is during the past two client updates we have had several cases where workstations have lost their network connection and the only way (we have found) to restore the network is to either do a manual install of the new client or remove the firewall component via add remove programs and the usual reboots. 

The issue tends to point toward the Symantec firewall driver so if it’s not there then hopefully the issue will be reduced.

Any thoughts?

If you don't use the firewall component/policies, you can remove it. IPS is a separate component and can be left installed and will work fine. NTP is comprised of both firewall and IPS and each are independent of one another.

Make sure you are on the latest version, 12.1.5 to see if the issue goes away:

Best practices for upgrading to the latest version of Symantec Endpoint Protection 12.1.x

Thanks Brian, 

I suspected that would be the case.

Stupid question time, we are running version 12.1.4112.4156 (released due to exploits in the previous version) is that different from 12.1.5?

Hi Minedu,

Yes, RU5 is a new release which just came out last week. Upgrde to avail of all the new enhancements, improvements and fixes!  &: )

Upgrading or migrating to Symantec Endpoint Protection 12.1.5 (RU5)
Article URL: http://www.symantec.com/docs/TECH224034

New fixes and features in Symantec Endpoint Protection 12.1.5 (RU5)
Article URL: http://www.symantec.com/docs/TECH224706

Symantec Endpoint Protection, Symantec Endpoint Protection Small Business Edition, and Symantec Network Access Control 12.1.5 Release Notes/What’s New
Article URL: http://www.symantec.com/docs/DOC7696

I recommend keeping the firewall, though IPS will function without it in SEP 12.1.  Here's a demo of why:

Blocked by Symantec Endpoint Protection
https://www.youtube.com/watch?v=OJjgrXpFS0c&list=UUhtrhQDQKWtBhc5NxCpSNgw

 

Please do update the thread with news of your progress / confirm if your question has been answered! &: )

With thanks and best regards,

Mick

Will upgrade to 12.1.5 and remove the Firewall component.

This article may help as well:

How to add or remove features to existing Symantec Endpoint Protection (SEP) client installations