Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

SEP blocking smb scan to folder

Created: 12 Oct 2012 | 9 comments

I'm running SEP 12.1 in unmanaged mode. I just set up a Ricoh MPC4000 copier and configured the scan to folder option. The scans kept failing. As soon as I disabled SEP it works fine. So, I know somewhere SEP is blocking it. I know I can add an allow rule but I'm sure one of the deny rules would override it. Aside from unchecking all the "block" rules, how can I allow this traffic through. Thanks for your help.

Comments 9 CommentsJump to latest comment

Ashish-Sharma's picture

HI,

Could you try uninstalling the NTP protection from the Add /Remove Programs, restart the machine and check if that resolves the issue?

Or Disable

SEP client ->Network Threat Protection ->Option ->Disable Network Threat Protection

Thanks In Advance

Ashish Sharma

 

 

Riya31's picture

Hi,

Check the NTP log against block condition

 and then uncheck only one rule.

 

oykunsatis's picture

Hello,

You can see in the logs of NTP,if there are some blockings. Also, IPS module may block these kind of systems due to some of signatures. You can also make an exception for IPS module. If this solution will not helped to you then you can try to remove NTP module also.

Regards,

Oykun

Mithun Sanghavi's picture

Hello,

What unamanged version of SEP 12.1 are you running?

Secondly, How have you configured the scan to folder option?

Is that folder any way related to the Ricoh Copier?

Is the Scan failing OR the Printing is Blocked ? I apologize, could you please explain..??

 

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

.Brian's picture

Disable NTP and try again

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

xlweiv's picture

Disabling the NTP works. So....that's a work around but not really fixing the problem. I see many blocked items in the log but the logs are really hard to understand. They don't really tell me X was blocked from IP x.x.x.x

.Brian's picture

Upload the log to review. What's the IP of the printer?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Mithun Sanghavi's picture

Hello,

Could you please upload the Network Threat Protection - Packet logs and Traffic Logs to understand the issue?

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Riya31's picture

could  it be possible to upload the NTP logs