Endpoint Protection Small Business Edition

First bare with me as some of my questions may be a little novice to most of you.

We have been using Endpoint vs 9 in a small bz environment for years now and have decided to deploy a newer model throughout the company.

All of our existing pc's operate xp-pro with latest updates and sp's. Office 2003 Pro, latest vs. etc....

We are currently not using a central server.  Each PC's connects through a central router, vie a T1 cable modem.  Our email accounts are hosted on an outside server.

We are currently building new PC's for each work station and installing Windows 7 Ultimate, along with a central server, for internal workloads, however we will continue at this time to host our email and web sights outside through a third party data center. (none of which has been implemented as of this writing)

Part of the implementation theory is to install SEP_SB vs12.

I have been playing with the program to become more familiar with it and ran into a couple of problems, (all discuss them as separate forum topics)

Problem with Email:

?: on one of the computers I installed SEP_SM12 as a stand alone, ie: unmanaged client.  What I  discovered is that all (send or created email in outlook) is held in the Outlook Outbox and cannot be sent.  The error message is connection with server cannot be made on the send, however all receive messages transmit and synch properly.  When I shut down SEP the email is sent with no problems.  Turn it back on, email is stuck. 

Nothing has been changed in the Outlook settings.  It is using port 25.   We never had this problem with the previous vs. of SEP so I am trying to determine is this something unique with the SB environment.  I wanted to deploy the protection on some lap tops that are not part of our company infrastructure,  because we have the additional licenses for SEP, however this issue looks like it is a stumbling block.

Also on the SEP unmanaged configuration window, under Virus/spyware  protection it does not matter whether email protection is enabled or disabled, the problem is present.

?: Also when installed as a unmanged client the proactive threat protection is disabled and listed as turned off by the Administrator.  Am I to assume that the only way this can be managed is through the Central Console?

?: Regarding the SEP_SB Firewall.  Is this firewall structure dependent on a primary server as the access point to Internet.  The unmanged installation shows no Firewall installed.  I am curious to know whether the Firewall is deployed to each PC from the  SEP Console and/or the executable created file when you  do the initial SEP console installation. ,  or is it something installed on the server only?  We have always tried to have redundant firewalls as added protection, from our Modem/Router to each PC.

Hi,

Regarding email problem:

It is possible that Symantec Antivirus plugin in Outlook Plugin manager was not removed when you uninstalled SAV 9. could you check it?

for Proactive Threat Protection - could you check if it is not your case:

Proactive Threat Protection (PTP) definitions are current, but its status stays OFF on systems running Windows Server 200x, Windows 7 or a 64-bit version of Windows XP
http://www.symantec.com/business/support/index?page=content&id=TECH97928&locale=en_US

The firewall will be activated only after the reboot - t uses kernel level driver which needs to be loaded at the boot.

Please keep us informed! :-)

Pawal, thank you for your timely reply.  We found the problem with the email.  We were running Zone Alarm in the background and inadvertenly denied SEP when a warning window came up from ZA.

Regarding the Proactive Threat Protection:

Under Status it shows it on.  However under Change Settings it is not available.  The configuration button indicates; The Administrator has locked this feature.  I should have been clearer in my description.

SEP is running a stand alone XP-pro 32 bit. 

----

Regarding the Firewall: 

I guess I am a little lost on this one.  There is no configuration or indication that there is a firewall operating on the main SEP Menu.  What would we look for to determine if its even loaded in the background?

Thanks

For Proactive Threat Protectio: it seems that you locked the settings for your clients from the console. Go to the console and open PTP policy assigned to the group where your client is. Then see if the padlock icons are closed - closed means that the setting cannot be changed from client UI.

Firewall: In SEP environment firewall + IPS = Network Threat Protection. If in your clients' window you can see NTP enabled and there is a firewall policy enabled and assigned to the group where your client is - it is activated. You can also check if teerer2.sys driver is loaded.

Let us know should you have further questions :-)

The driver is teefer2.sys

You can also checked under device manager to see if you have a teefer miniport driver installed.