Endpoint Protection

 View Only
  • 1.  Security question

    Posted Jan 24, 2015 10:56 AM

    When starting my computer I get a message indicating that NT Kernel_System has changed and asks if I will allow.  I am not sure what this is and if I should allow.  Please help



  • 2.  RE: Security question
    Best Answer

    Posted Jan 24, 2015 10:56 AM

    This is the network application monitoring feature in SEP.

    Setting up network application monitoring

    Specifying how Symantec Endpoint Protection handles monitored applications on Windows clients

    What version are you running? Is this a managed or unmanaged client?

    That executable needs to update so it reached out to the Internet to try and update. Looks like SEP is set to watch for this.



  • 3.  RE: Security question

    Posted Jan 24, 2015 11:06 AM

    So Brian, are you saying this is an automatic update that I should allow?



  • 4.  RE: Security question

    Posted Jan 24, 2015 11:12 AM

    That is a Windows process so it should be OK. Does it give the exact name? Can you provide a screenshot?



  • 5.  RE: Security question

    Posted Jan 24, 2015 10:56 PM

    Hi Brian  Thanks so much for your help.  I do not know how to do a screen shot but the name of the application is NT Kernel_System NTOSKRNL.EXE



  • 6.  RE: Security question

    Posted Jan 25, 2015 12:43 AM
    This is a normal windows, should be fine to allow


  • 7.  RE: Security question
    Best Answer

    Posted Jan 26, 2015 03:05 AM

    --Name Edit--

    Check the greg12 comment from the attach thread. Hope it will help you and clear your point

    https://www-secure.symantec.com/connect/forums/network-threat-protection-9



  • 8.  RE: Security question

    Posted Jan 26, 2015 08:41 AM

    Thank you both for your help resolving this problem. All is now ok. Problem solved.



  • 9.  RE: Security question

    Posted Jan 26, 2015 08:44 AM

    What was it? Please mark the most helpful answer as the solution. Thanks!