Endpoint Protection

Hi all.

On our windows print server we have the problem that randomly the connection to printers is lost. from the server we cannot ping the printers and people cant print. after a few minutes everything is fine again.

i am 99% sure that sep is the problem because i know that sep blocks an ip for 10 minutes if sep thinks that he's getting attacked.

i need to find out why this is happening. however i did not find anything in the sep client logs on the print server. i also tried to look at the reports on the sep management server but i did not really find anything. are those "attacks" not getting logged anywhere?

This is the active response. Check the security log on the client. You can disable this in the firewall policy.

Hi. The sep security log is empty. Filter -> show all logs -> 0 Records

Hi Omeng,

Also check out the SEPM "Network Threat Protection" attack logs.

With thanks and best regards,

Mick