Endpoint Protection

 View Only
  • 1.  SEP 11 MR4 Blocking Exchange Server

    Posted Apr 01, 2009 10:33 AM
    Hi,

    Since upgrading to MR4, SEP randomly displays a message telling me its received a port scan from the IP address of our Exchange server, and its going to block traffic from that IP address for the next 10 minutes. This then stops all email being sent/recived from Outlook, which thinks its suddenly gone offline. The only way to get Outlook working again, is to disable SEP for the 10 minute duration.

    This never happened while we ran SEP RTM, MR1, MR2 or MR3, only since upgrading to MR4. Any one know why it thinks Exchange is trying to do a port scan? It used to do it on our old Exchange server, but we replaced this last week due to a failure, and the new server is a clean build, with just Windows 2003 standard SP2, all updates and fixes applied, Exchange 2003 SP2. There shouldn't be anything on it that is causing a port scan!

    Any help or suggestions would be appreciated, I'm getting fed up of the MR4 release, which seems to have caused us no ends of problems.

    Ben


  • 2.  RE: SEP 11 MR4 Blocking Exchange Server

    Posted Apr 01, 2009 01:21 PM
    Hi Ben, Did you tried with MR4 MP1a?...
    http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/2c62c4ee0e697aae882573b000034ded?OpenDocument

    The MR4 has some issues with Outlook that were 'fixed' in the MR4 MP1a.