Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Internet Explorer slowness with Network Threat Protection

Created: 25 Sep 2012 | 8 comments

Last week our company rolled out a massive install of Endpoint Protection 11 with Network Threat Protection.  Ever since then users with older computers running Broadcom 57XX network cards have had nothing but problems.  The biggest problem is that Internet Explorer will all of a sudden come to a halt, where it may literally take a minute to load google.com.  The problem doesn't go away until the user reboots their computer, and sometimes even that doesn't seem to fix it.  Even though Dell only has drivers for the 57XX network cards from 2007 I went to Broadcom's website and downloaded the 2011 drivers but that didn't seem to help.  The lesser problem is that users will receive the blue screen of death, this may happen maybe once or twice a day while Internet Explorer coming to a halt happens 3-5 times a day.

One thing to note is that the problem only seems to affect Internet Explorer, Firefox and Chrome don't seem to have problems, unfortunately the application that our employees spend 99% of their time in is Internet Explorer only.

So far this is what I've done to troubleshoot

1.) Update all drivers

2.) Windows update, apply all patches

3.) Disable NTP - This appears to resolve the problem but I can't accept that as an answer

4.) Update bios

We're using version 11.0.7000.975 of Enpoint Protection

Comments 8 CommentsJump to latest comment

Rafeeq's picture

Hi

Do you have any application and device management rule configured

http://www.symantec.com/business/support/index?page=content&id=TECH103087

Error: BugCheck_STR: 0x8E referencing sysplant
Fix ID:
2688234
Symptom: Application and Device Control feature causes blue screen error when the machine enters hibernation.
Solution: Added a hook to link to the library only once and improved error handling

Cyprusg's picture

Rafeeq, none of our systems go into hibernate.  When users do get a blue screen it happens randomly.

.Brian's picture

Try withdrawing the IPS policy to see if the problem goes away.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Cyprusg's picture

Excuse my ignorance but is the IPS policy the Intrusion Prevention?  How do I withdraw it, you mean to just uncheck anything to do with Intrusion Prevention?

.Brian's picture

Yes, Intrusion Prevention

In SEPM, go to Clients >> Policies tab

Select a group which to do this on (you may want to create a test group and move a few machines there)

Under Location-specific Policies and Settings, select Tasks next to the IPS policy and select Withdraw Policy

Screenshot attached:

untitled.JPG

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Cyprusg's picture

As crazy as this sounds no one has access to SEPM.  It's managed by Dell.  Any equivelant for just the client?

.Brian's picture

Right click the SEP icon in the task tray and "Disable Symantec Endpoint Protection" This should disable NTP (firewall and IPS).

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.