Data corruption for Symantec or your business data corruption ?

Have you installed all features of sep on server machines ie av as /ptp/ntp ?

If yes only install av and as first and check

Hello,

What is the full version of SEP 12.1 you are carrying??

When you check the Traffic Logs and Packet Logs in the SEP client of the machine in question, do you see anything being blocked??

For the last two weeks, we've been experiencing "Disk or Network Error" messages at the client with every Access Database runtime used in our environment. The messages were random and sporadic. All the local databases attached to back end databases on a server running SEP 11.0.4202. All the clients run SEP 12.1.671.

We've been trying to chase down every possible cause (disk errors, switches, database corruption), we've been running diagnostics on the network, servers and clients. Packet trace captures for days, and performance logs being gone over with a fine tooth comb. Nothing. Haven't found a thing at the file, client or server.

Then, starting Monday the 12th, we haven't had one error message. Everything has been smooth for a day and a half, so far. I had not even considered SEP as a possible culprit. Time to go through the logs and see if they show anything. This is a good possiblility as to the cause, but without a definitive log showing an event that correlates to the error message, there will always be that nagging doubt.

I thought you were supposed to upgrade the server first, then the clients.

Are the Access databases excluded from scanning? If not, they should be. Auto-Protect may be trying to scan as the database is being accessed.

This document is for SEP 11; SEP 12.1 isn't much different; they're called "Exceptions" now instead of "Centralized Exceptions". Microsoft probably has specific recommendations for Access; they certainly do for servers in general.

Best Practices for Installing Symantec Endpoint Protection (SEP) on Windows Servers - http://www.symantec.com/docs/TECH92440

(This document has links to specific documents on creating exclusions.)

Which protection technologies are installed on the server? If only antivirus, this rules out interference from Network Threat Protection.

hforman, I think gk means the server is protected by SEP 11.0.4202 (quite an old build, BTW; May '09) and workstations have SEP 12.1. (What version is the SEPM?)

sandra