SEP blocking Aexagent.exe
Updated: 23 Aug 2010 | 6 comments
We are ramping up a new installation and have run into a problem a few machines.
Has anyone else had this problem on boot??
SYMANTEC tAMPER PROTECTION ALERT
Target c;}windows\temp\apt1\AeXNSAgent.exe
Event Info: Allocation Memory
Action Taken: Logged
Action Process: C;\program files\common files\logshrd\lvmvfm\etc, etc
Target c;}windows\temp\apt1\AeXNSAgent.exe
Event Info: Allocation Memory
Action Taken: Logged
Action Process: C;\program files\common files\logshrd\lvmvfm\etc, etc
We have the following
Altiris Base Task Handlers 7.0.7270
Altiris Client Task Agent 7.0.7270
Altiris Inventory Agent 7.0.1106
Inventory Rule Agent 7.0.7270
Software Management Framework Agent 7.0.7270
Software Management Agent 7.0.7270
DellClient Manager Agent 3.1.1128
discussion Filed Under:
Comments
It more than likely depends on how
SEP in configured. I have done many SEP\Altiris related installations, and at least default SEP settings don't exhibit this behavior. So you are going to want to check the Application Control policies, or the SNAC configuration depending on what you have installed.
Jim Harings
HP Enterprise Services
1st Rule of Connect Club: Mark the post that helped you the most as a 'solution'. 2nd Rule of Connect Club:You must talk about Connect club.
no snac and app control
We don't have NAC or apllication control enabled in SEP
Create a centralized exception
Create a centralized exception to Tamper Protection
1. In SEPM, click Policies
2. Under View Policies, choose Centralized Exceptions
3. Under Tasks, choose "Add a Centralized Exceptions Policy"
4. Define the exception item (AeXNSAgent.exe by itself should work, but you may need to add path, e.g. C:\windows\temp\apt1\AeXNSAgent.exe), type (Tamper Protection File), and Action (Ignore).
5. Do this only if you're sure that Altiris isn't interfering with SEP11. But I find that highly unprobable, so I'm sure you're golden to make this exception.
Mike Clemson, Systems Engineer
Intuitive Technology Group -- Symantec Platinum Partner
Did the suggestion help you?
Please mark mclemson's reply as s solution if it helped you. Doing so helps everyone else who may be having a similar issue.
Jim Harings
HP Enterprise Services
1st Rule of Connect Club: Mark the post that helped you the most as a 'solution'. 2nd Rule of Connect Club:You must talk about Connect club.
Not helping
I know you can put an exception in but we should not need to put an exception for a Symantec core product,
It makes no sense.
SEP should not be resonding like this,
I have been out of country or would have responded sooner.
I recommend opening a support case
I recommend opening a support case. Considering there's a KB called 'How to disable Tamper Protection so that it does not conflict with Altiris,' https://kb.altiris.com/article.asp?article=29500&p=1.
Mike Clemson, Systems Engineer
Intuitive Technology Group -- Symantec Platinum Partner
Would you like to reply?
Login or Register to post your comment.