I have a few machines in my organization where Symantec Client Securities have been uninstalled. After uninstallation, without any other network threat protection software running, all inbound connections to the endpoint device are completely blocked. Connections initiated by the endpoint device work fine and in most cases, it does not affect productivity of the end user at all. In a few instances, like laptops, it becomes a huge inconvenience when trying to assist the users with things like installing printers.
Does anyone know the root cause of this issue? The activities to reproduce the issue include uninstalling SCS then restarting. After restarting I verified that the Windows Firewall/ICS service has been disables per local machine policy and that the machine is connected to the network. From a different computer initiating an RDP connection, an RPC connection, a remote adminstrator connection (port 4899), and a simple IPC connection attempt all fail. All inbound connections fail. Uninstalling and reinstalling the driver may work.
This issue was first observed after uninstalling SCS and installing SEP. SEP does not seem to be the problem as simply uninstalling SCS and disabling Windows FW/ICS still creates the problem. It seems to be on a lower level (something SCS does upon installation).