Endpoint Protection

I have been trying to remove Sonar from my client package without disabling it by policy, but it does not seem to be working.  I have gone to my install package and setup a client install feature set to have ONLY the antivirus and no Sonar, and then I apply it to the groups where I do not want the sonar but it does not uninstall the sonar.  Is there any way to uninstall the Sonar without completely uninstalling and resinstalling the symantec?  Thanks for any help!

Hello,

Check this Articles:

About SONAR

Managing SONAR

About the files and applications that SONAR detects

Hope that helps!!

No, Sorry thats all about Sonar.... I know what it does, I just do not need it on my systems and it is conflicting with another software that we run.  It won't let me uninstall it. 

When you assigned the package, does it run msiexec.exe?

do u see any msg in the event viewer

This is the step you followed?

http://www.symantec.com/business/support/index?page=content&id=TECH90936

That sounds like the right steps you're taking. Any errors messages coming up?

What version of SEP are you running?

I am running SEP 12.

Rafeeq,

I did follow those exact instructions.  When I click on a client and go to edit properties under Deployment Status it says "The client decided to reject the upgrade package"  and under Deployment Message it says "Client has ignored upgrade package".

If I add new clients, the client install feature set works and sonar is not installed, but for my current users it is not removing the sonar.  I would really hate to have to manually reinstall SEP on all of my servers.   Any ideas?

Sonar is still not removing.... Left it for a while and restarted servers.   Changed their OU and then put them back but still not removing sonar.  Any Ideas?

Hello,

SONAR is the real-time protection that detects potentially malicious applications when they run on your computers. SONAR uses heuristics as well as reputation data to detect emerging and unknown threats. SONAR provides "zero-day" protection because it detects threats before traditional virus and spyware detection definitions have been created to address the threats. 

Sonar is an Integral Part of SEP 12.1 and could not be removed. However, you can disable the protection from SEPM.

Check this Screenshot:

Hope that answers!!