Endpoint Protection

 View Only
  • 1.  semantec endpoint protection causing socket error 11004 on win 7?

    Posted Jan 28, 2014 02:05 PM

    I'm trying to map an ftp site as a drive letter on win 7 using ftpuse.  I keep receiving a socket error 11004.  I can ping the ftp site successfully.  Is it possible semantec endpoint protection is causing the socket error?



  • 2.  RE: semantec endpoint protection causing socket error 11004 on win 7?

    Posted Jan 28, 2014 02:11 PM

    Does it work if you disable SEP?

    Open the sep interface and check the logs , possible that its been blocked by Network threat protection component which is a firewall in SEP

    check these two discussions

    https://www-secure.symantec.com/connect/forums/symantec-blocking-ftp-login

    https://www-secure.symantec.com/connect/forums/sep-firewall-blocking-outbound-ftp-connections



  • 3.  RE: semantec endpoint protection causing socket error 11004 on win 7?

    Posted Jan 28, 2014 02:16 PM

    What version of SEP and what components do you have enabled?

    If NTP (firewall/IPS) what's showing in your traffic log and Security log?

    It could either be the IPS or firewall



  • 4.  RE: semantec endpoint protection causing socket error 11004 on win 7?

    Posted Jan 28, 2014 02:33 PM

    Unfortunately the company I work for centrally manages the SEP clients therefore I have no access to SEP Manager to modify the rules.

    SEP Version 11.0.6100.645, NTP is enabled.

    More info: FTP from a command line works.  FTPUSE.exe creates the 11004 socket error.



  • 5.  RE: semantec endpoint protection causing socket error 11004 on win 7?

    Posted Jan 28, 2014 02:37 PM

    Is there anything showing in the Traffic log (blocking traffic) or Security log (IPS signature firing)?

    Any chance you can disable NTP to verify?



  • 6.  RE: semantec endpoint protection causing socket error 11004 on win 7?

    Posted Jan 28, 2014 03:37 PM

    Fixed it.

    Sorry for the exercise, it was a compatibility issue with win 7 not SEP after all.

    Thanks.