Remote access blocked after Windows Update

Created: 09 Jul 2012 | 4 comments

jamchugh

I have a Win 2003 server running SEP11.0.1000.1375 . Many times after Windows Updates are installed andd the server rebooted , remote access using RDP is blocked. And of course this server is miles away in our data center. Once I go there I log in locally and try to access any network resource and I get a message about a file changing (usually NT Kernel) and to click OK if this was expected. And then RDP works. While I want to use as many features of SEP as possible I don't want it blocking network access like that since I don't want to drive over there every time. Suggestions? I have gone thru all of the settings and I can't figure of which one it is without overkill.

Thanks

Discussion Filed Under:

Security, Endpoint Protection (AntiVirus) - 11.x, Endpoint Protection (AntiVirus), Configuring, Troubleshooting

Comments RSS Feed

Comments 4 Comments • Jump to latest comment

Vikram Kumar-SAV to SEP Symantec Employee Accredited

Remote access blocked after Windows Update - Comment:09 Jul 2012 : Link

That is totally not a recommended version..

Upgrade to SEP 12.1 or SEP 11 RU7 MP2 11.0.7200.xx

Vikram Kumar

Symantec Consultant

The most helpful part of entire Symantec connect is the Search button..do use it.

Brian81 Trusted Advisor

Remote access blocked after Windows Update - Comment:09 Jul 2012 : Link

You're running one of the first versions of SEP. Have you considered upgrading?

I assume you are using NTP on your server?

It sounds like you are using the Network Application Monitoring feature. Can you confirm?

Basically, all applications that make network access request will be monitored to detect changes in the executable. You can either set it to "Ask" "Block the traffic" or "Allow and Log"

Considering this is a server, I would either not use this feature or set it to allow and log. Or you can add the application to the Unmonitored Application List so it won't be monitored at all.

Setting up network application monitoring

http://www.symantec.com/business/support/index?pag...

SEP Knowledge Base

Endpoint SWAT