Endpoint Protection

 View Only
Expand all | Collapse all

Firewall driver never work after multiple reboot ?

John Santana

John SantanaNov 06, 2012 05:51 PM

Migration User

Migration UserNov 07, 2012 06:42 AM

Chetan Savade

Chetan SavadeNov 13, 2012 09:00 AM

  • 1.  Firewall driver never work after multiple reboot ?

    Posted Nov 05, 2012 10:39 PM

    Hi,

    What is the best way to get rid of this problem after manual SEP 12.1 RU1 MP1 install ?

    I have rebooted several times without any success in Windows XP SP3 32 bit environment.



  • 2.  RE: Firewall driver never work after multiple reboot ?

    Posted Nov 05, 2012 10:43 PM

    The client reported back in successfully to the SEPM manager console, but somehow the Firewall driver is not loaded properly.

    Any kind of idea would be greatly appreciated.



  • 3.  RE: Firewall driver never work after multiple reboot ?

    Posted Nov 05, 2012 10:51 PM

    HI,

    Check this

    After the Symantec Endpoint Protection 12.1 installation, the firewall driver is not loaded. Cannot uninstall NTP (Network Threat Protection)

    http://www.symantec.com/docs/TECH166169

     

    Check this thread

    http://www.symantec.com/connect/forums/firewall-driver-not-loaded



  • 4.  RE: Firewall driver never work after multiple reboot ?

    Posted Nov 06, 2012 12:22 AM

     

    Use CleanWipe to uninstall the SEP 12.1 client

    Upgrade Internet Explorer to version 8 (IE8)

    Reinstall the SEP 12.1 client.



  • 5.  RE: Firewall driver never work after multiple reboot ?

    Posted Nov 06, 2012 12:27 AM

    Hi,

    I have uninstalled the SEP from the upgrade, and what I did was to manually install the managed SEP 12.1 client with Sylink.XML point to the SEPM server, I have also deselect the Application and Device Blocking feature.



  • 6.  RE: Firewall driver never work after multiple reboot ?

    Posted Nov 06, 2012 12:43 AM
    HI John SEP client are Updated ? If not please update virus defination .


  • 7.  RE: Firewall driver never work after multiple reboot ?

    Posted Nov 06, 2012 12:50 AM

    Restart the machine after the install is completed and see if it contnues to work and stays updated and connected.



  • 8.  RE: Firewall driver never work after multiple reboot ?

    Posted Nov 06, 2012 06:59 AM

    Ashish,

    Yes it is updated and shown as connected in the SEPM console.



  • 9.  RE: Firewall driver never work after multiple reboot ?

    Posted Nov 06, 2012 07:00 AM

    Yes homer, I have asked the user to reboot their workstation numerous time already.



  • 10.  RE: Firewall driver never work after multiple reboot ?

    Broadcom Employee
    Posted Nov 06, 2012 10:35 AM

    Hi,

    Could you please provide setupapi.log & sisinst.log

    Setupapi.logs location: c:\windows\setupapi.log

    Teeferinstall.log sourceFolder: C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\TeeferXP

    Update driver for the Network Interface Card.

    Also if possible try these steps:

    1) Uninstall SEP client

    2) Take back up of the registry
    3) Delete the following keys

    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\eventlog\System\Teefer3
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\eventlog\System\Teefer3
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Teefer3
    HKLM\SYSTEM\CurrentControlSet\Services\Teefer3

    4) Reboot the machine
    5) Reinstall SEP client.



  • 11.  RE: Firewall driver never work after multiple reboot ?

    Posted Nov 06, 2012 05:51 PM

    Thanks for the advice Chetan



  • 12.  RE: Firewall driver never work after multiple reboot ?

    Posted Nov 06, 2012 07:03 PM
      |   view attached

    Chetan, I cannot find the Teeferinstall.log but I have attached the setupapi.log file.

    I have rename it into .txt

    Attachment(s)

    txt
    setupapi.txt   847 KB 1 version


  • 13.  RE: Firewall driver never work after multiple reboot ?

    Posted Nov 07, 2012 06:42 AM

    Hi

    Please upgrade to SEP 12.1 RU1 MP1

    Regards

     



  • 14.  RE: Firewall driver never work after multiple reboot ?

    Broadcom Employee
    Posted Nov 07, 2012 07:27 AM

    Hi,

    Could you please confirm it was a fresh install or upgrade?

    If it's an upgrade could you please test by doing fresh install?

    logs attached by you are very similar to the issue mentioned in the following article, does your system receiving an ip address?

    Migration from 11.x to 12.1 RU1 causes some machines not be able to obtain an IP address.

    http://www.symantec.com/docs/TECH188201



  • 15.  RE: Firewall driver never work after multiple reboot ?

    Posted Nov 07, 2012 06:34 PM

    Yes, it is functioning properly just that warning is annoying some people.

    this is auto upgrade from 11.0.4 into 12.1 RU1 MP1 pushed by the SEPM server of the same version.



  • 16.  RE: Firewall driver never work after multiple reboot ?

    Broadcom Employee
    Posted Nov 08, 2012 06:08 AM

    Hi,

    Supported upgrade path is SEP 11 RU4 -->SEP 12.1 RU1--> SEP 12.1 RU1 MP1

    However could you please check by doing fresh install on 2-3 machines?



  • 17.  RE: Firewall driver never work after multiple reboot ?

    Posted Nov 08, 2012 05:40 PM

    yes Chetan, somehow only some workstation is affected with this issue.

    the rest is working fine with green dot on the SEP client, and it report backs to the SEPM console successfully.



  • 18.  RE: Firewall driver never work after multiple reboot ?

    Broadcom Employee
    Posted Nov 13, 2012 09:00 AM

    Hi John,

    Do you have any update on this issue?



  • 19.  RE: Firewall driver never work after multiple reboot ?

    Posted Nov 13, 2012 07:03 PM

    Yes, I have asked the client to be uninstalled from the WIndows XP SP3, somehow after deleting the registry and then reboot to perform fresh install, the error still there ?

     



  • 20.  RE: Firewall driver never work after multiple reboot ?

    Broadcom Employee
    Posted Nov 14, 2012 02:22 AM

    Hi,

    Even after fresh install of SEP issue is persisting then could you please pass on SST logs.

    Here is the location of the Symantec Endpoint Protection Support Tool:

    www.symantec.com/business/support/index?page=content&id=TECH105414



  • 21.  RE: Firewall driver never work after multiple reboot ?

    Posted Nov 14, 2012 04:23 AM

    Feel free to contact Support for Assistance:

     

     

    Phone numbers to contact Tech Support:-

     

    Regional Support Telephone Numbers:
    United States: https://support.broadcom.com (407-357-7600 from outside the United States)
    Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
    United Kingdom: +44 (0) 870 606 6000

    India: Toll-Free 000 800 4401 456 directly

    IDD call: +61 2 8220 7111

     

    Additional contact numbers: http://www.symantec.com/business/support/contact_techsupp_static.jsp

     

    Customer Care Contact Numbers for Licensing Issues:-

    http://www.symantec.com/support/assistance_care.jsp

     

     

    How to create a new case in MySupport

    http://www.symantec.com/business/support/index?page=content&id=TECH58873



  • 22.  RE: Firewall driver never work after multiple reboot ?

    Posted Nov 14, 2012 06:30 PM

    Many thanks for the willingness to assist.

    this is happening to the remote PC users in the remote office, which is far from me, so if I call the tech support, forwarding the call to the affected users is not a good idea since he is not a technical user.