Endpoint Protection

Wondering if anyone out there is using SEP & Imprivata 4.1 or later.

We are on SEP RU7 MP1 & Imprivata 4.1.759.759.

We've had this issue where our bootup time is really slow.  The really slow part is the blue background that displays before the CTRL+ALT+DEL prompt in XP.  It ranges anywhere from 30 seconds to 1 minute.  Users tend to think our computers are frozen and will sometimes do a hard shutdown on them.  This slow part in the bootup process is in addition to the other boot steps in XP as well as Symantec Endpoint Encryption which we also use.  Total boot-time ranges from 1.5 - 2.5 minutes. 

I've had a ticket with both vendors (with Symantec it's been over a year now) and it's been determined that AutoProtect is scanning an Imprivata file (SSOMANHOST.exe) many times during bootup.  This was determined with a program called Process Monitor or Process Explorer.  It showed many batches of reading the ssomanhost.exe process during bootup.  If either app is removed the blue background part of the boot process is only about 5 seconds...normal.  Once both apps are installed the slow boot shows up again.

Creating various centralized and local exceptions does not help.  Disabling other features of SEP hasn't helped.  Disabling Auto Protect at startup is the only thing that seems to do the trick, but bootup security should be sacrificed when AutoProtect or centralized exceptions is not working properly.  I was told that SEP7 RU7 MP2 should fix the issue.  I tried the beta version and was dissappointed as it hasn't worked.

I'm loosing hope in tech support.  I've emailed the tech who I've been working with multiple times over the last few weeks but he keeps showing as OOTO.  I rather not start all over with another tech.  I thought I'd try another posting and hoping someone else will read it who is using SEP and Imprivata.  I don't see how we could be the only folks with this issue.

Would really appreciate any help or suggestions.

Hello,

Thank you for letting us know that you are carrying the Latest version of SEP 11.0.7101.

Symantec is aware of this issue. Could you please PM me your case #, so that we could check on the same.

This issue has been resolved in the upcoming version of SEP RU7 MP2.

As you say, this is not resolved, let me check the case and assure you that we may look into the case as soon as we receive  the case #.

Hope that helps!! 

Hi Pstuart,

The forthcoming release (SEP 11 RU7 MP2) contains changes to underlying components which should resolve this slow boot. 

Please do upgrade as soon as it is available and update this thread with your findings! &: )

Thanks in advance!

Thanks for responding...

You mention RU7 MP2 should do the trick.  I'm using the beta version and I'm still having the issue.  Is this final release different from the beta where it'll truly fix the slow booting?

The beta does not contain all of the fixes and new components which are in the final official release- from what I have read, one of the new components should offer the improvement necessary.  Defiitely try it out.

One note: do uninstall the beta first, then perform a fresh/clean install of the RU7 MP2.  Don't just try to install the new release over the beta.

Please do update this thread with your results tomorrow!  & )

Ok...I'm curious if you can provide more info on this component you are reading about?  Will centralized exceptions be more reliable and truly work?  Just curious..but the way you are talking, it sounds like the official release is coming out tomorrow...is that the case?

You got me a little excited...hope it's coming out tomorrow and it has my fix...*crossing fingers*

Here are the release notes detailing the major fixes:

Release notes for Endpoint Protection and Network Access Control 11
Article: TECH103087   |  Created: 2007-01-12   |  Updated: 2012-04-26   | 
Article URL http://www.symantec.com/docs/TECH103087

The important change that I think will do the trick is the new release of the Auto-Protect component (10.3.8.7, up from the earlier 10.3.8)

One important note - do not upgrade directly over the beta build.  To be sure everything is safe and clean, uninstall the beta then perform a fresh install of SEP 11 RU7 MP2.

Looking forward to the news of how this works for you......

Unfortunately....this new version still does not resolve the problem.  I uninstalled the beta version first, rebooted, then loaded the new production version.  I installed it as an unmanaged client.  I created all possible centralized exceptions.  The boot time is still slow.

I uninstall my Imprivata program and the boot is quick.  I reinstall Imprivata and it's still slow.  If I uninstall SEP my boot is quick.

What if I give you folks an installer of Imprivata?

Hi Pstuart,

yes, please do pass a copy of that instalelr to your case owner.  The Tech Support Engineer can try to reproduce the behavior in-house with the latest SEP and that software. 

With best regards,

Mick