Network Threat Protection Error

Symantec World's picture

Hi Team,

In our environment we are facing typical issue, many  users machines network drive connectivity  are automatically disconnected.after reboot the machine its open Symantec dialog box with some message.On message when we click on "No" network connectivity getting lost .after clicking on "yes" to that message its getting connected.here attached screen shot for your ready reference.

Very appreciate your quick solution.

connect/imagebrowser/view/image/1048891/_original

Regards,
M.R

AravindKM's picture

Screen shot is not

Screen shot is not available.....

 

Symantec World's picture

Re

Please find I have updated.

Regards,
M.R

sandip_sali's picture

Network Threat Protection Error

Hi,

       In this case the issue seems to be with the Network Threat Protection feature on these clients, we would request you to uninstall the Network Threat Protection feature and then check for the performance of the system. Please keep us updated about the status after the uninstall of NTP.

Thanks & Regards

Sandip C Sali

AravindKM's picture

Try by reinstalling NTP....  

Try by reinstalling NTP....

 

Symantec World's picture

Re

Sandeep,

We are using NTP since a year and from yesterday we face the issue.

Regards,
M.R

AravindKM's picture

You may also check for any

You may also check for any recent policy
changes...

 

Symantec World's picture

Re

Aravind..,

We have not done any kind of changes in SEPM.

Regards,
M.R

Vikram Kumar-SAV to SEP's picture

 Is a a known feature of SEP.

 Is a a known feature of SEP. If you have any Firewall Policy applied for applications it will allow the applications but once the application has changed ( updated ) the hash changes so again it will ask you whether you want to allow it or not.

Do you have set the firewall policy in ASK mode?
or are these clients in Client Mode

Celebrating 2 years as a community member....

Symantec World's picture

Re

Vikram,

Thanks for your comments,

This all policy of firewall are default and we are not using application blocking.

Regards,
M.R

Symantec World's picture

Re

I know this could be asked if you add any fingerprints to block application but we have not added anything.

Regards,
M.R

AravindKM's picture

  Can u try by uninstalling

 

Can u try by uninstalling any recently
installed os patches...

Also check any version change
happens for your applications...

 

Vikram Kumar-SAV to SEP's picture

 This is not due to

 This is not due to application control but the Firewall policy for Application.
And also are your clients in Client Mode--as then local firewall policy will overrule and there is a default firewall policy to ask before allowing a application.

I am talking about these two policies as show in the pic.

Celebrating 2 years as a community member....

Symantec World's picture

Re

I have attached my current policy of my SEPM.

policy_Firewall.JPG

Regards,
M.R

Symantec World's picture

Re

Please suggest if need to change anything.

Regards,
M.R

Vikram Kumar-SAV to SEP's picture

 Are you clients in Client

 Are you clients in Client Control mode ir Server Control Mode?

Celebrating 2 years as a community member....

Symantec World's picture

Re

Client Control Mode.

Regards,
M.R

Vikram Kumar-SAV to SEP's picture

Yes so in that case all

Yes so in that case all firewall policy are over ruled by the client and the local firewall policy on the client supercedes.
So as shown in the pic check if on your client "Prompt before allowing application traffic is checked"

Celebrating 2 years as a community member....