Endpoint Protection

Hi, I've installed SEP 11.0.6200.754 on a new PC with a fresh Windows 7 Ultimate installation and am unable to share folders or a local printer from this machine as long as Network Threat Protection is enabled.  It's a member of a domain, and while other domain members are able to see the computer, they cannot see folders or printers. 

In addition to enabling printer and folder sharing, I also created a custom firewall rule that allowed all traffic from IP addresses 192.168.0.1 - 192.168.0.254.  This didn't help, and attempted accesses to the machine are blocked and logged as block by SEP.

Any help possible?  TIA.

Kevin

Hello,

Try these steps.

1. Click Start, and then click Run.
2. Type regedit, and then click OK.
3. Navigate to the following key:
4. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters
5. In the Parameters folder of the registry, right-click the right pane.
6. Point to New, and then click DWord Value.
7. Type IRPStackSize.
8. Point to New, and then click DWord Value. (default value is 15 )
9. Close the Registry Editor.
10. Restart the computer. 

Hi Mithun,

I think you meant step 8 to be to set the IRPStackSize to decimal 15, hex $0F.  I did this, it has not solved the problem.

Any other suggestions?  Thanks.

Kevin

Hello,

Is this happening only on 1 machine?

Try the Following.

1. Uninstall SEP with Liveupdate.
2. Uninstall the LAN card Driver and Reinstall it again.
3. Install SEP with Full Feature set.

Inother words for the Step 2,

1. Open Device Manager
2. Start > Run > services.msc
3. Display hidden devices
4. View > Show hidden devices
5. Delete Ethernet adapter
6. Expand Network Adapters
7. Identify Ethernet Adapter
8. Right click > Delete adapter
9. Right click Network Adapters > Scan for hardware changes

Hope that works.

Mithun, I have taken the steps you recommend, the problem remains.

I have a second, new Windows 7 64-bit PC with SEP and the same problem.

Help!

Kevin

Hello,

Could you try installing SEP as unmanaged on these machines?

I am just trying to get to the root level, understanding what is causing this issue to occur.

Let me see, you said this is happening on Windows 7 machines, one is a 32 bit and other a 64 bit, correct?

Could you try working on the steps provided in the Article below:

https://www-secure.symantec.com/connect/articles/windows-7-firewall-indicate-these-settings-are-being-managed-vendor-application-symantec-en

I know the above is not the issue, however, try on the solution part and check if that works.

in the policies tab,there is an IPS policy called intrusion prevention, under exception put u r printers IP and exclude it.