Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Firewall is malfunctioning

Created: 12 Mar 2013 | 17 comments

Hi,

I installed SEP 12.1.2015.2015 on my windows xp embedded system(wes 2009) successfully, but after I rebooted system, SEP apperared a error message "Firewall is malfunctioning " and tray icon of SEP had also a error message "Symantec Endpoint Protection Firewall driver is not loaded".

I found teeferInstall.log (c:\windows\temp) had some error message and said teefer driver installed fail.

How can I fix the firewall issue?

Following are log message:

2013-03-13 06:38:56 sourceFolder: C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\TeeferXP

2013-03-13 06:38:56 teefer.inf: C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\TeeferXP\teefer.inf
2013-03-13 06:38:56 teeferm.inf: C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin\TeeferXP\teefer_m.inf
2013-03-13 06:38:56 insertNetworkFilterClass() succesfully set registry for FilterClasses to 003B6190
2013-03-13 06:38:56 Acquired write lock for 'Symantec Firewall'
2013-03-13 06:38:56 Release write lock for 'Symantec Firewall'
2013-03-13 06:38:56 Check the service database lock status.
2013-03-13 06:38:56 The service database is locked, lock acquired by ".\NT Service Control Manager" for 37s
2013-03-13 06:38:58 ERROR: Call to installNetComponent() failed: 0x800704c7
2013-03-13 06:38:58 Teefer install failed, trying once more in 5 seconds
2013-03-13 06:39:03 Found 'oem10.inf'
2013-03-13 06:39:03 Found 'oem9.inf'
2013-03-13 06:39:03 Uninstalling 'oem9.inf'
2013-03-13 06:39:03 Uninstalling 'oem10.inf'
2013-03-13 06:39:04 Acquired write lock for 'Symantec Firewall'
2013-03-13 06:39:04 Release write lock for 'Symantec Firewall'
2013-03-13 06:39:04 Check the service database lock status.
2013-03-13 06:39:04 The service database is unlocked.
2013-03-13 06:39:05 ERROR: Call to installNetComponent() failed: 0x800704c7
2013-03-13 06:39:05 InstallFirewall failed second attempt: 0x800704c7
=========================================================================================
 
Operating Systems:

Comments 17 CommentsJump to latest comment

Rafeeq's picture

whats the version of IE?

After the Symantec Endpoint Protection 12.1 installation, the firewall driver is not loaded. Cannot uninstall NTP (Network Threat Protection)

http://www.symantec.com/business/support/index?page=content&id=TECH166169
W007's picture

Hello,

Look this thread and comments

https://www-secure.symantec.com/connect/forums/fir...

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Rafeeq's picture

Please follow the document I posted earlier. the issue is with IE8 please follow the steps as mentioned in that document.

shinjy's picture

Hi Rafeeq,

Thank you for your help, but I don't know where is your document?

Do you mean this article http://www.symantec.com/business/support/index?page=content&id=TECH166169 ?

The article indicate that upgrade Internet Explorer to version 8(IE8), but I am using IE8 not IE6.

shinjy's picture
Hi Rafeeq,
 
Thank you for your help, but I don't know where is your document?
 
Do you mean this article "After the Symantec Endpoint Protection 12.1 installation, the firewall driver is not loaded. Cannot uninstall NTP (Network Threat Protection)" ?
 
The article indicate that upgrade Internet Explorer to version 8(IE8), but I am using IE8 not IE6.
Rafeeq's picture

Please uninstall the SEP software

reboot and install SEP again.

shinjy's picture

Hi Rafeeq,

I wanted to uninstall SEP, but it can not be uninstalled and show error message "Fatal error during installation".

.Brian's picture

Contact support and they can get you Cleanwipe. Run that and it will remove SEP from your system.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Shama's picture

Hi, 

I have Install Failed, Rolled back on approximately 100 machines.  We cant run manual CleanWipe tool to uninstall SEP and reinstall.  Is there a way the tool could be scripted.

Elangovan's picture

Check out the below link to know the steps to resolve the "Firewall Malfunctioning" issue due to "Firewall driver is not loaded", this will guide you to do Manuall bind teefer driver to NIC

https://www-secure.symantec.com/connect/blogs/firewall-malfunctioning-firewall-driver-not-loaded

Shama's picture

Hi,

We are currently not even installing the Firewall feature.  Would this still be a problem?

John Santana's picture

Hi,

Does the workstation got deployed with SCCM or any other image deployment tool which may have caused this issue ?

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

Shama's picture

Hi,

The deployment was done using Altiris. Altiris just uses vbscript and executes the package created by SEP. Same deployment methodology was adapted throughout the network. Strangely only a few failed during the rollout except for one site which had only 5 machines with SEP successfully deployed.

John Santana's picture

Shama, I also don't know why this happens, so far I can only rely with manual reinstallation with Cleanwipe if the SCCM deployment is failed.

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

Shama's picture

Hi John,

Wasn't Symantec able to provide a better solution.  Using CleanWipe manually on 100's of machines is not practical.  Symantec Support told me to use SepPrep tool which they don't support, and even that does not work.

I really wonder what motivated Symantec developers to remove the silent install feature from the CleanWipe tool and how difficult it is to just add a few more codes in the existing program to make its customers life easier.

Additionally, what does Install fail, rolled back mean in symantec terminology.  Install still completes on clients (which cannot be easily uninstalled) when deployment status complains install Failed, Rolled back. 

Shama