Endpoint Protection

 View Only
  • 1.  No any connection after error of Endpoint

    Posted Dec 02, 2009 06:10 AM

    Every day happens error with Symantec EndPoint Protection.
    When somthing happend I can't go to internet and it's inposible to see any resourses from networ.
    When happened error this window appear^

    Afret that I have to restart my computer. Our system administrator can't solve this problem.

    Troubleshoting log from Endpoint here:

    General Information
    -------------------
    Server:  10.69.4.134
    Group:  My Company\EMEA\Moscow\Workstations
    Location:  Internal
    Location awareness:  Enabled
    Security policy compliance:  Disabled
    SNAC status:  Not Licensed
    Policy serial number:  823F-11/18/2009 11:33:42 116

    Engines
    -------
    SymEvent:  12.5.3.2
    Auto-Protect Kernel Driver:  10.2.8.2
    Auto-Protect User Mode Interface:  10.2.8.3
    LiveUpdate:  3.3.0.78
    Common Client:  106.3.8.4
    Decomposer:
    Tamper Protection:
    Eraser:  7143426.131076

    Definitions
    -----------
    Definitions Pattern:  3080743 r39 (0)
    SyKnAppS:  1.5.0 (80929016)
    SyKnAppS:  MicroDefsB.CurDefs (91201019)
    COH:  6.1.0 (80820001)
    IPS Serial Number:

    Symantec Endpoint Protection
    ----------------------------
    Debug log settings: 

    Client Management
    -----------------
    Debug log settings:  Debug=Off

    User
    ----
    Name:  alexka
    Domain:  ROXARDOMAIN
    SID:  S-1-5-21-682003330-562591055-1801674531-35131

    Groups
    ------
    LOCAL:  Mandatory, Enabled By Default, Enabled
    Administrators (BUILTIN):  Mandatory, Enabled By Default, Enabled, Owner
    Everyone:  Mandatory, Enabled By Default, Enabled
    EX_RSS_MOS_RESERVOIR (ROXARDOMAIN):  Mandatory, Enabled By Default, Enabled
    Users (BUILTIN):  Mandatory, Enabled By Default, Enabled
    CERTSVC_DCOM_ACCESS (ROXARDOMAIN):  Mandatory, Enabled By Default, Enabled
    Domain Users (ROXARDOMAIN):  Mandatory, Enabled By Default, Enabled
    EX_ALL_CIS (ROXARDOMAIN):  Mandatory, Enabled By Default, Enabled
    INTERACTIVE (NT AUTHORITY):  Mandatory, Enabled By Default, Enabled
    EX_ALL_ROXAR_WORLDWIDE (ROXARDOMAIN):  Mandatory, Enabled By Default, Enabled
    EX_ALL_RUS (ROXARDOMAIN):  Mandatory, Enabled By Default, Enabled
    EX_ALL_RSS_CIS (ROXARDOMAIN):  Mandatory, Enabled By Default, Enabled
    EX_ALL_RSS_WORLD_WIDE (ROXARDOMAIN):  Mandatory, Enabled By Default, Enabled
    Authenticated Users (NT AUTHORITY):  Mandatory, Enabled By Default, Enabled
    This Organization (NT AUTHORITY):  Mandatory, Enabled By Default, Enabled

    Privileges
    ----------
    SeBackupPrivilege (
    SeRestorePrivilege (
    SeShutdownPrivilege (
    SeDebugPrivilege (
    SeIncreaseQuotaPrivilege (
    SeSystemEnvironmentPrivilege (
    SeChangeNotifyPrivilege (
    SeRemoteShutdownPrivilege (
    SeUndockPrivilege (
    SeSecurityPrivilege (
    SeTakeOwnershipPrivilege (
    SeLoadDriverPrivilege (
    SeManageVolumePrivilege (
    SeSystemProfilePrivilege (
    SeImpersonatePrivilege (
    SeSystemtimePrivilege (
    SeCreateGlobalPrivilege (
    SeProfileSingleProcessPrivilege (
    SeIncreaseBasePriorityPrivilege (
    SeCreatePagefilePrivilege (

    Operating System
    ----------------
    Windows XP Professional x64
    5.2.3790 Service Pack 2 (Build 3790)

    Computer
    --------
    Number of processors:  2
    Intel(R) Core(TM)2 Duo CPU     P8600  @ 2.40GHz

    Memory
    ------
    Physical (total/available):  2026/789 MB
    Virtual    (total/available):  2047/1921 MB

    Drive Space -- Total (GB)/Free (GB)
    -----------------------------------
    C:  40,0/22,2
    D:  192,9/133,6
    R:  799,6/17,6
    Y:  799,6/17,6
    Z:  968,9/79,8



  • 2.  RE: No any connection after error of Endpoint

    Posted Dec 02, 2009 11:30 AM
    Can you give us some details of your SEP environment?

    1.What version of SEP 11 are you running?
    2. Is this client managed or unmanaged?
    3. How many clients are you seeing this issue occur?
    4. Are you running any other security or encryption software?
    5. What errors are you seeing in the event viewer?
    6. Is this happing on wired or wireless, or both?



  • 3.  RE: No any connection after error of Endpoint

    Posted Dec 03, 2009 03:28 AM
    1.  Version 11.0.4014.26
    2. I don't know. How can I find out it?
    3. Only me, because another user use another programs.
    4. No, definataly.
    5. Lots of eroors like this:

    Event Type:    Error
    Event Source:    Application Popup
    Event Category:    None
    Event ID:    333
    Date:        02.12.2009
    Time:        16:55:41
    User:        N/A
    Computer:    MOS-SUP-B17
    Description:
    An I/O operation initiated by the Registry failed unrecoverably. The Registry could not read in, or write out, or flush, one of the files that contain the system's image of the Registry.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 00 00 00 00 01 00 6c 00   ......l.
    0008: 00 00 00 00 4d 01 00 c0   ....M..À
    0010: 00 00 00 00 4d 01 00 c0   ....M..À
    0018: 00 00 00 00 00 00 00 00   ........
    0020: 00 00 00 00 00 00 00 00   ........


    and it maybe last one after it a had to reload laptop:

    Event Type:    Error
    Event Source:    Service Control Manager
    Event Category:    None
    Event ID:    7023
    Date:        02.12.2009
    Time:        16:59:55
    User:        N/A
    Computer:    MOS-SUP-B17
    Description:
    The WebClient service terminated with the following error:
    The system cannot find the path specified.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


    6. I use wire. but I think it hapen for all types of connections.


  • 4.  RE: No any connection after error of Endpoint

    Broadcom Employee
    Posted Dec 03, 2009 05:16 AM
    can you try installing RU5 version( latest)?

    also try installing on AV module frm SEP. If RU 5 has the issue, you may collect debug crash for smcgui.


  • 5.  RE: No any connection after error of Endpoint

    Posted Dec 03, 2009 06:09 AM
    Could you give me the link for this products?


  • 6.  RE: No any connection after error of Endpoint

    Broadcom Employee
    Posted Dec 03, 2009 06:22 AM
    its the same product , SEP , with te latest version. You should be downloading it from fileconnect using your serial number.


  • 7.  RE: No any connection after error of Endpoint

    Posted Dec 03, 2009 07:54 AM
    I haven't serial becase I'm not admin. And our admin is ill now