Endpoint Protection

 View Only

  • 1.  Possible software incompatibility with Symantec Endpoint 12.1

    Posted Oct 20, 2011 09:32 AM

    How do I check for software incompatibilities with Symantec and another software I am running? The software i'm using will crash sporadically throughout a work day while Symantec is running int he background. If Symantec is uninstalled, the software does not crash. Are there any logs or debugging mode? I have 3 end users using this software and all 3 machines are identical with symantec endpoint 12.1 installed on them.



  • 2.  RE: Possible software incompatibility with Symantec Endpoint 12.1

    Broadcom Employee
    Posted Oct 20, 2011 09:51 AM

    for symantec you can open a case and ask for the logs.

    Basically it would be sep support tool logs and application crash dump.



  • 3.  RE: Possible software incompatibility with Symantec Endpoint 12.1

    Posted Oct 20, 2011 10:56 AM

    Is it a browser based application or something that uses a Browser Helper Object like an add-on in your browser? I agree with the above as well, start a support case to troubleshoot. Windbg is a really cool debugger that might be worth running while you reproduce the crash. Trying to troubleshoot something like this in forums is going to be really difficult.



  • 4.  RE: Possible software incompatibility with Symantec Endpoint 12.1

    Trusted Advisor
    Posted Oct 20, 2011 11:04 AM

    Hello,

    It would really help us if you could let us know more about the Software.? What is the name of the software??

    Is it using any ports which Symantec Endpoint Protection is using?

    Is Symantec detecting that Software as Threat??

    Did you check the Windows Application Logs, on what is making the software crash??

    If SEP detecting certain files of the Software as Threat, check the Risk Log, Threat Logs or Traffic Log

    Answers to these questions would lead you to the Solution.

    Hope that helps!!



  • 5.  RE: Possible software incompatibility with Symantec Endpoint 12.1

    Posted Oct 20, 2011 11:13 AM

    The software is Unicam FX from Siemens. 

     

    This is the event log txt file where the error occurs and I was wondering if Symantec had anything to do with it.

     

    1 11:21:31 AM .NET Runtime 2.0 Error Reporting Error None 1000 N/A Faulting application unicamfx.exe, version 9.1.2.793, stamp 4d6ea985, faulting module comctl32.dll, version 6.0.2900.6028, stamp 4c729dd1, debug? 0, fault address 0x0002673e.
    8/12/2011 11:17:11 AM .NET Runtime 2.0 Error Reporting Error None 1000 N/A PC0588 Faulting application unicamfx.exe, version 9.1.2.793, stamp 4d6ea985, faulting module comctl32.dll, version 6.0.2900.6028, stamp 4c729dd1, debug? 0, fault address 0x0002673e.
    8/12/2011 10:45:54 AM .NET Runtime Error None 1023 N/A PC0588 .NET Runtime version 2.0.50727.3623 - Fatal Execution Engine Error (7A0BC58E) (80131506)
    8/12/2011 10:16:31 AM .NET Runtime 2.0 Error Reporting Error None 1000 N/A Faulting application unicamfx.exe, version 9.1.2.793, stamp 4d6ea985, faulting module rpcrt4.dll, version 5.1.2600.6022, stamp 4c68fa8c, debug? 0, fault address 0x0005a0c0.
    8/12/2011 9:23:19 AM .NET Runtime 2.0 Error Reporting Error None 1000 N/A Faulting application unicamfx.exe, version 9.1.2.793, stamp 4d6ea985, faulting module ntdll.dll, version 5.1.2600.6055, stamp 4d00f27d, debug? 0, fault address 0x00011053.
    8/12/2011 8:33:52 AM Windows Search Service Warning Gatherer 3036 N/A "The content source <iehistory://{s-1-5-21-1925670836-1949960484-1563503735-1943}/> cannot be accessed.
     
    Context:  Application, SystemIndex Catalog
     
    Details:
    The filtering was stopped because of a user action, such as stopping the crawl.    (0x80040d54)
    "
    8/12/2011 8:03:31 AM .NET Runtime 2.0 Error Reporting Error None 1000 N/A Faulting application unicamfx.exe, version 9.1.2.793, stamp 4d6ea985, faulting module unicamfx.exe, version 9.1.2.793, stamp 4d6ea985, debug? 0, fault address 0x002d0086.


  • 6.  RE: Possible software incompatibility with Symantec Endpoint 12.1

    Posted Oct 20, 2011 11:22 AM

     

    The exceptions I’ve set are for:

     

    C:\Program files\Siemens\Unicam\Unicam FX\ucwfx.exe   Exception type: All scans

    C:\Program files\Siemens\*         Exception type: Security Risk Scans

    C:\Unicam Security\*                  Exception type: Security Risk Scans

    C:\Program files\Siemens\          Exception type: Sonar

    C:\Unicam Security\*                  Exception Type: Sonar



  • 7.  RE: Possible software incompatibility with Symantec Endpoint 12.1

    Trusted Advisor
    Posted Oct 20, 2011 02:45 PM

    Hello,

    Open the SEP client on that machine and check the Risk Log, Threat Logs or Traffic Log.

    Please let us know what do you see??

     



  • 8.  RE: Possible software incompatibility with Symantec Endpoint 12.1

    Posted Oct 20, 2011 03:22 PM

    Those logs are empty on all 3 machines.



  • 9.  RE: Possible software incompatibility with Symantec Endpoint 12.1

    Posted Oct 22, 2011 03:10 PM

    IF SEP is conflicting with the said programs,there should be logs.Pay attention to proactive threat protection logs.Try removing SONAR or Proactive threat protection and see if issue is resolved

    I would also advise you to open a case with symantec support