Video Screencast Help
Symantec Appoints Michael A. Brown CEO. Learn more.

Firewall driver never work after multiple reboot ?

Created: 05 Nov 2012 | 21 comments

Hi,

What is the best way to get rid of this problem after manual SEP 12.1 RU1 MP1 install ?

I have rebooted several times without any success in Windows XP SP3 32 bit environment.

Comments 21 CommentsJump to latest comment

John Santana's picture

The client reported back in successfully to the SEPM manager console, but somehow the Firewall driver is not loaded properly.

Any kind of idea would be greatly appreciated.

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

Ashish-Sharma's picture

HI,

Check this

After the Symantec Endpoint Protection 12.1 installation, the firewall driver is not loaded. Cannot uninstall NTP (Network Threat Protection)

http://www.symantec.com/docs/TECH166169

 

Check this thread

http://www.symantec.com/connect/forums/firewall-driver-not-loaded

Thanks In Advance

Ashish Sharma

 

 

Simpson Homer's picture

 

Use CleanWipe to uninstall the SEP 12.1 client

Upgrade Internet Explorer to version 8 (IE8)

Reinstall the SEP 12.1 client.

John Santana's picture

Hi,

I have uninstalled the SEP from the upgrade, and what I did was to manually install the managed SEP 12.1 client with Sylink.XML point to the SEPM server, I have also deselect the Application and Device Blocking feature.

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

Ashish-Sharma's picture

HI John

SEP client are Updated ?

If not please update virus defination .

Thanks In Advance

Ashish Sharma

 

 

John Santana's picture

Ashish,

Yes it is updated and shown as connected in the SEPM console.

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

Simpson Homer's picture

Restart the machine after the install is completed and see if it contnues to work and stays updated and connected.

John Santana's picture

Yes homer, I have asked the user to reboot their workstation numerous time already.

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

Chetan Savade's picture

Hi,

Could you please provide setupapi.log & sisinst.log

Setupapi.logs location: c:\windows\setupapi.log

Teeferinstall.log sourceFolder: C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\TeeferXP

Update driver for the Network Interface Card.

Also if possible try these steps:

1) Uninstall SEP client

2) Take back up of the registry
3) Delete the following keys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\eventlog\System\Teefer3
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\eventlog\System\Teefer3
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Teefer3
HKLM\SYSTEM\CurrentControlSet\Services\Teefer3

4) Reboot the machine
5) Reinstall SEP client.

Chetan Savade
Sr Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

John Santana's picture

Chetan, I cannot find the Teeferinstall.log but I have attached the setupapi.log file.

I have rename it into .txt

AttachmentSize
setupapi.txt 847.01 KB

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

John Santana's picture

Thanks for the advice Chetan

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

SameerU's picture

Hi

Please upgrade to SEP 12.1 RU1 MP1

Regards

 

Chetan Savade's picture

Hi,

Could you please confirm it was a fresh install or upgrade?

If it's an upgrade could you please test by doing fresh install?

logs attached by you are very similar to the issue mentioned in the following article, does your system receiving an ip address?

Migration from 11.x to 12.1 RU1 causes some machines not be able to obtain an IP address.

http://www.symantec.com/docs/TECH188201

Chetan Savade
Sr Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

John Santana's picture

Yes, it is functioning properly just that warning is annoying some people.

this is auto upgrade from 11.0.4 into 12.1 RU1 MP1 pushed by the SEPM server of the same version.

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

Chetan Savade's picture

Hi,

Supported upgrade path is SEP 11 RU4 -->SEP 12.1 RU1--> SEP 12.1 RU1 MP1

However could you please check by doing fresh install on 2-3 machines?

Chetan Savade
Sr Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

John Santana's picture

yes Chetan, somehow only some workstation is affected with this issue.

the rest is working fine with green dot on the SEP client, and it report backs to the SEPM console successfully.

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

Chetan Savade's picture

Hi John,

Do you have any update on this issue?

Chetan Savade
Sr Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

John Santana's picture

Yes, I have asked the client to be uninstalled from the WIndows XP SP3, somehow after deleting the registry and then reboot to perform fresh install, the error still there ?

 

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

Chetan Savade's picture

Hi,

Even after fresh install of SEP issue is persisting then could you please pass on SST logs.

Here is the location of the Symantec Endpoint Protection Support Tool:

www.symantec.com/business/support/index?page=conte...

Chetan Savade
Sr Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

John Santana's picture

Many thanks for the willingness to assist.

this is happening to the remote PC users in the remote office, which is far from me, so if I call the tech support, forwarding the call to the affected users is not a good idea since he is not a technical user.

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

Simpson Homer's picture

Feel free to contact Support for Assistance:

 

 

Phone numbers to contact Tech Support:-

 

Regional Support Telephone Numbers:
United States: 800-342-0652 (407-357-7600 from outside the United States)
Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
United Kingdom: +44 (0) 870 606 6000

India: Toll-Free 000 800 4401 456 directly

IDD call: +61 2 8220 7111

 

Additional contact numbers: http://www.symantec.com/business/support/contact_techsupp_static.jsp

 

Customer Care Contact Numbers for Licensing Issues:-

http://www.symantec.com/support/assistance_care.jsp

 

 

How to create a new case in MySupport

http://www.symantec.com/business/support/index?page=content&id=TECH58873