Endpoint Protection

 View Only

  • 1.  SEP Citrix issues

    Posted Oct 11, 2012 02:11 PM

    Has anyone had issues with SEP causing blue screens on Citrix W2K3 servers?  I am experiencing isolated issues on a handle of Citrix servers.  Most of the fleet is not having any issues.  I am not convinced the SEP is the culprit, but our Citrix team seems to think so.  I'm just sending out feelers to see if anyone has experienced the same.



  • 2.  RE: SEP Citrix issues

    Broadcom Employee
    Posted Oct 11, 2012 02:15 PM

    well, enable the full dump and pass on the logs to support team.

    hope you are using the latest version of SEP client



  • 3.  RE: SEP Citrix issues

    Posted Oct 11, 2012 02:16 PM

    What version of SEP and what components are installed?



  • 4.  RE: SEP Citrix issues

    Posted Oct 11, 2012 02:27 PM

    There  are some issue that aare fixed in 12.1 Release Update 1 Maintenance Patch 1 for cirix. If possible try to install 12.1 Release Update 1 Maintenance Patch 1 and see if that helps

    Citrix EdgeSight for Virtual Desktops application errors
    Fix ID: 2608836/2637570/2647457
    Symptom: Citrix EdgeSight for Virtual Desktops is installed with SEP and the Application and Device Control feature is enabled. Several applications may terminate unexpectedly after the computer is restarted:
    “Rundll32.exe – Application error: The instruction at 0x75447740 Referenced Memory at 0x75447740. The memory could not be written.”
    “Wermgr.exe – Application error: The instruction at 0x75447740 Referenced Memory at 0x75447740. The memory could not be written.”
    “WerFault.exe – Application error: The instruction at 0x75447740 Referenced Memory at 0x75447740. The memory could not be written.”
    “Userinit Logon Application has stopped working”
    Solution: A method to get the volume name for a mount point was moved from the Application and Device Control DLL (sysfer.dll) into the driver (Sysplant.sys) to resolve this issue.


  • 5.  RE: SEP Citrix issues

    Posted Oct 11, 2012 02:28 PM

    http://forums.citrix.com/thread.jspa?threadID=245085

    Disable Tamper Protection and  I m sure that would help

    disable the Symantec tamper protection filter driver - SPBBCDrv.

    This is done in the registry:
    HKLM\System|CurrentControlSet\Services\SPBBCDrv
    Set the Start value to 4 (which means disabled) and reboot the server.

    http://www.symantec.com/business/support/index?page=content&id=TECH162566



  • 6.  RE: SEP Citrix issues

    Trusted Advisor
    Posted Oct 11, 2012 03:01 PM

    Hello,

    What version of SEP 11.x / 12.1 are you running ?

    Has the Best Practices for Symantec Endpoint Protection on Citrix and Terminal Servers followed?

    Check this Article: http://www.symantec.com/docs/TECH91070

    However, for further investigations on BSOD, you would have to collect the Full Memory Dump files and create a Case OR contact Symantec Technical Support.

    QuickStart Guide - Create and Manage Support Cases in SymWISE

    http://www.symantec.com/docs/HOWTO31132

    How to update a support case and upload diagnostic files with MySupport

    http://www.symantec.com/docs/TECH71023

    OR

    Regional Support Telephone Numbers:

    United States: https://support.broadcom.com (407-357-7600 from outside the United States)

    Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)

    United Kingdom: +44 (0) 870 606 6000

    Additional contact numbers: http://www.symantec.com/business/support/contact_techsupp_static.jsp

    Hope that helps!!



  • 7.  RE: SEP Citrix issues

    Posted Oct 17, 2012 10:27 AM

    We are running RU7 MP1 on these particular servers.  Memory dumps have already been sent to Symantec for review and the best practices document has been reviewed and the needed changes implemented.  



  • 8.  RE: SEP Citrix issues

    Posted Oct 17, 2012 10:30 AM

    Are you still getting the BSODs?



  • 9.  RE: SEP Citrix issues

    Posted Oct 17, 2012 12:03 PM

    Also, if it's still happening, what version of Citrix is it? I know it can't be higher than 4.5, but that may also make some difference. Are all the servers running the same version with the same Citrix patches?



  • 10.  RE: SEP Citrix issues

    Posted Oct 19, 2012 05:06 AM

    Hi nwranich,

    The latest versions of SEP should work very well with Citrix, when the best practices are followed. 

    Do update this thread, if time allows, when you have received the results of the memory dumps that were submitted for examination!