Endpoint Protection

I'm running SEP 12.1 in unmanaged mode. I just set up a Ricoh MPC4000 copier and configured the scan to folder option. The scans kept failing. As soon as I disabled SEP it works fine. So, I know somewhere SEP is blocking it. I know I can add an allow rule but I'm sure one of the deny rules would override it. Aside from unchecking all the "block" rules, how can I allow this traffic through. Thanks for your help.

HI,

Could you try uninstalling the NTP protection from the Add /Remove Programs, restart the machine and check if that resolves the issue?

Or Disable

SEP client ->Network Threat Protection ->Option ->Disable Network Threat Protection

Hi,

Check the NTP log against block condition

 and then uncheck only one rule.

Hello,

You can see in the logs of NTP,if there are some blockings. Also, IPS module may block these kind of systems due to some of signatures. You can also make an exception for IPS module. If this solution will not helped to you then you can try to remove NTP module also.

Regards,

Oykun

Hello,

What unamanged version of SEP 12.1 are you running?

Secondly, How have you configured the scan to folder option?

Is that folder any way related to the Ricoh Copier?

Is the Scan failing OR the Printing is Blocked ? I apologize, could you please explain..??

Disable NTP and try again

Disabling the NTP works. So....that's a work around but not really fixing the problem. I see many blocked items in the log but the logs are really hard to understand. They don't really tell me X was blocked from IP x.x.x.x

could  it be possible to upload the NTP logs

Upload the log to review. What's the IP of the printer?

Hello,

Could you please upload the Network Threat Protection - Packet logs and Traffic Logs to understand the issue?

Hope that helps!!