Endpoint Protection

I was using Firefox 3.6.22 to connect to both internet and intranet websites without any issues.  Then, my company replaced the Symantec Firewall with Symantec Endpoint Protection client 11.0.6200 (with AntiVirus, Proactive Threat, Network Threat components).  After SEP 11 was installed, the Firefox connections to external websites (www.google.com, www.ibm.com, etc) all stopped working - Firefox connects just fine to my company's intranet website.  The external websites that are blocked for Firefox, work just fine with Internet Explorer.

Any ideas?  What logs should I be checking for clues?

Try to upgrade Mozilla to version 4.x that may help..

The traffic which is not matching any SEP Firewall rule will be automatically blocked.

Why wouldn't the SEP Firewall Rule block the same external websites when Internet Explorer is used on the same PC?

Try looking at the client logs and see what may be causing the traffic to be blocked. Are you running any Firefox add-ons? If so, you might try disabling those one at a time and see if the issue disappears.

Can you be more specific on what log that I should look at? 

When I goto the View Logs page, I have 4 different View Log buttons. Each of the following components has a "View Logs" button:

Antivirus protection, Proactive Threat Protection, Network Threat Protection, and Client Management

Try looking at the PTP and NTP logs. Is everyone in your company experiencing the issue? Have you brought this issue up with your company IT department? This might be a policy issue enforced by your employer..

Hi,

 Run an Repair of  Firefox once and then check it ...

Nothing in either the PTP & NTP logs. 

Others are not experiencing the problem.  If it was a company policy to block external websites, wouldn't SEP block them for both Firefox and Internet Explorer?  The external websites work fine with IE.

No Firefox add-ons are installed because I re-installed Firefox.  I disabled all of the extensions and plug-ins and the problem still persists. 

No luck, thanks for the idea.

Hi , 

Check is there any firewall rule for firefox in Manager ???

Where do I check for a Firewall rule in SEP?

Where do I check for a Firewall rule in SEP?

Check the firewall in the Manager console ...

Loaded Mozilla 4.0 and the problem still exists

Here's the only Firewall Rules that are in place.  I don't see anything that is Firefox specific.

Allow NDISUIO.SYS Driver
Allow RDP
Block IPv6 (Ethernet type 0x86dd)
Block IPv6 over IPv4 (Teredo) Remote UDP Port 3544
Allow EAPOL wireless traffic

Try running the SEP support tool and report back any errors found.

http://www.symantec.com/business/support/index?page=content&id=TECH105414&locale=en_US

You might then try an uninstall and a reinstall of SEP. After removing SEP test first to see if the issue goes away before reinstalling the client software.

Please follow the steps

The "Allow Symantec" Rule

1. In the Symantec Endpoint Protection Manager (SEPM) console, under the Clients view, select the Group where you want to apply this policy.
2. Select Policies tab on right side.
3. Double-click the Firewall policy and select Edit Shared when prompted.
4. In the Firewall Policy window select Rules.
5. Click the Add Blank Rule button. A blank rule is added to the list.
6. Change the name of new rule to (for example) "Allow Symantec", and then select the appropriate Severity.
7. Double-click in the Application cell to invoke the Application List dialog box.
8. Select Add to invoke the Add Application dialog box and enter iexplore.exe (or firefox.exe) to allow Internet Explorer (or Firefox) to go to symantec.com.
9. Click OK twice to return to the firewall policy window.
10. Double-click the Host cell to invoke the Host List dialog box.
11. With the Source/Destination option enabled, click Add from the Source section and enter the IP address or IP range of the computers to be allowed.
12. From the Destination section, click Add, select DNS Domain from the Type drop-down list and enter *.symantec.com. Click OK twice again to return to the Firewall Policy window.
13. Leave Service at Any and select Action to Allow.
14. You may also enable logging by selecting Write to Traffic log from the Logging column.

Unfortunately I'm not allowed to Change Settings on Network Threat Protection to add that firewall policy.  Looks like I need to try re-installing SEP.

I have you tried firefox version 8?

Same error with Firefox 8

Tomorrow I plan on reinstalling SEP