Endpoint Protection

On 01 August 2009, after virus definition update on Windows XP SP2 PCs, one old application Primavera has started misbehaving. Client are managed and definitions are pushed through management server.

If I uninstall the Endpoint Protection client or disable the "Proactive Threat Protection" component, everything becomes normal. There is no log about suspecious activity in client or server.

Application is about 10 years old.

Any clue?

Proactive Threat Protection does not allow to  run Primavera happily !!!!

I am also facing the same issue but no of users are below 10 so i had opened a case, resolved by removing PTP.

Have u  opened a case with Symantec. ?

Clue :- Sysplant.sys creates problem to Primavera


Regards..
Ramji Iyyer

Yes, I have opened the case with Symantec. They have suggested to put Primavera files in Exception List which I have already tried.
I have tried SEP 11.0.4 with latest definitions in unmanaged mode and Primavera runs without problem.
Right now, My SEP manager and clients are 11.0.2 version.
Can I upgrade one client to 11.0.4 without upgrading the Manager?

They have suggested you the right option. PTP has the ability to detect known security risk and Application control so try to follow the procedure suggested by Symantec TechSuport.

Hi,

try this go to monitors tab
click on logs
slected risk log
if you find you application listed here, try adding it to the centralized exceptions lists, this should work.

you can just upgrade the clients with latest version
on the box , run the mr4 sep setup.exe, this should upgrade to latest version, however the manager would remain the same.

YEs you can upgrade your SEP clients without upgrading the SEPM, you need to isolate the problem need for futher testing regarding your issue, so that you wont encountered a big problem.
do you have a policy in PTP?