The client reported back in successfully to the SEPM manager console, but somehow the Firewall driver is not loaded properly.

Any kind of idea would be greatly appreciated.

HI,

Check this

After the Symantec Endpoint Protection 12.1 installation, the firewall driver is not loaded. Cannot uninstall NTP (Network Threat Protection)

http://www.symantec.com/docs/TECH166169

Check this thread

http://www.symantec.com/connect/forums/firewall-driver-not-loaded

Use CleanWipe to uninstall the SEP 12.1 client

Upgrade Internet Explorer to version 8 (IE8)

Reinstall the SEP 12.1 client.

Hi,

I have uninstalled the SEP from the upgrade, and what I did was to manually install the managed SEP 12.1 client with Sylink.XML point to the SEPM server, I have also deselect the Application and Device Blocking feature.

HI John

SEP client are Updated ?

If not please update virus defination .

Restart the machine after the install is completed and see if it contnues to work and stays updated and connected.

Yes homer, I have asked the user to reboot their workstation numerous time already.

Hi,

Could you please provide setupapi.log & sisinst.log

Setupapi.logs location: c:\windows\setupapi.log

Teeferinstall.log sourceFolder: C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\TeeferXP

Update driver for the Network Interface Card.

Also if possible try these steps:

1) Uninstall SEP client

2) Take back up of the registry
3) Delete the following keys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\eventlog\System\Teefer3
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\eventlog\System\Teefer3
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\Teefer3
HKLM\SYSTEM\CurrentControlSet\Services\Teefer3

4) Reboot the machine
5) Reinstall SEP client.

Thanks for the advice Chetan

Hi

Please upgrade to SEP 12.1 RU1 MP1

Regards

Hi,

Could you please confirm it was a fresh install or upgrade?

If it's an upgrade could you please test by doing fresh install?

logs attached by you are very similar to the issue mentioned in the following article, does your system receiving an ip address?

Migration from 11.x to 12.1 RU1 causes some machines not be able to obtain an IP address.

http://www.symantec.com/docs/TECH188201

Yes, it is functioning properly just that warning is annoying some people.

this is auto upgrade from 11.0.4 into 12.1 RU1 MP1 pushed by the SEPM server of the same version.

yes Chetan, somehow only some workstation is affected with this issue.

the rest is working fine with green dot on the SEP client, and it report backs to the SEPM console successfully.

Yes, I have asked the client to be uninstalled from the WIndows XP SP3, somehow after deleting the registry and then reboot to perform fresh install, the error still there ?

Hi,

Even after fresh install of SEP issue is persisting then could you please pass on SST logs.

Here is the location of the Symantec Endpoint Protection Support Tool:

www.symantec.com/business/support/index?page=conte...

Feel free to contact Support for Assistance:

Phone numbers to contact Tech Support:-

Regional Support Telephone Numbers:
United States: 800-342-0652 (407-357-7600 from outside the United States)
Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
United Kingdom: +44 (0) 870 606 6000

India: Toll-Free 000 800 4401 456 directly

IDD call: +61 2 8220 7111

Additional contact numbers: http://www.symantec.com/business/support/contact_techsupp_static.jsp

Customer Care Contact Numbers for Licensing Issues:-

http://www.symantec.com/support/assistance_care.jsp

How to create a new case in MySupport

http://www.symantec.com/business/support/index?page=content&id=TECH58873