Endpoint Protection

Is there a way to identify from the client if NTP is running without opening the Symantec Endpoint Protection client?  I know you can use sc query teefer to see if the teefer driver is running.  I'm looking for something from a process standpoint.  Similar to rtvscan.exe.  What process would I see running that identifies NTP is running on a specific workstation.

You will not see a diffrent process when NTP is installed.


Title: 'How to tell if Symantec Network Threat Protection is installed on an endpoint'
Document ID: 2010032515144648
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2010032515144648?Open&seg=ent

NTP comes under SMC process ..many other things also come under SMC..so there is no specific process to determine NTP is ON


To check if Network Threat Protection and is Turned ON.
HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC
smc_engine_status  0 – means turned OFF 1- turned ON.