Endpoint Protection

 View Only
  • 1.  SEP RU5 block network traffic

    Posted Dec 19, 2009 02:02 PM

    I have installed SEP RU5 (32 bit) on a fresh Windows 7 (x86) install. By default it seems that SEP is blocking my network traffic (both intranet and web) and if I disable SEP I have network again.

    This never occured with Windows Vista (x86 & x64). Any suggestion?

    Thank you.

    Marco



  • 2.  RE: SEP RU5 block network traffic

    Posted Dec 19, 2009 11:02 PM
    For network threat protection and how rules are priortized  check this document

    Symantec Endpoint Protection 11.0 Network Threat Protection (Firewall) Overview and Best Practices White Paper

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007121714495348
    to see which rule is blocking internet or intanet
    open sep
    select view logs
    select network threat protection
    select traffic log
    check the rule ( the rule name will be at the end)
    make changes according (its its block, make it to allow)
    check if you are able to access internet
     


  • 3.  RE: SEP RU5 block network traffic

    Posted Dec 20, 2009 05:57 PM
    Due to various issues, we're sticking with the improved Windows 7 firewall for now with the Windows 7 machines.  What happens if you use the default settings on a SEPM group for the firewall and NTP?


  • 4.  RE: SEP RU5 block network traffic

    Posted Dec 21, 2009 04:44 AM
    It seems that NT Kernal (C:\WINDOWS\system32\ntoskrnl.exe) is being blocked so I followed the suggestions found in this discussion:<o p=""></o>

     

    http://www.symantec.com/connect/forums/sep-11-ru5-mr5-nt-kernal-still-being-blocked<o p=""></o>

    <o p=""></o>Unfortunately it never solved my problem.<o p=""></o><o p="">
    </o>

    Waiting for a solution (I think that many other users are experiencing the same problem with Window 7) I tried to disable SEP firewall to use Windows 7 firewall. However, it is not possible to enable/disable Windows 7 firewall because the system report that these featurea are managed by Symantec Endpoint Protection.
    Any idea?<o p=""></o>



  • 5.  RE: SEP RU5 block network traffic

    Posted Dec 21, 2009 05:02 AM
    Go to add remove programs
    Select SEP click on change
    It  will open a wizard
    In the second screen you will get an option to modify
    Select it and in the next screen uncheck NTP and all sub component click next.
    This will uninstall NTP feature.
    Reboot the pc and check whether the issue persist or not..