Endpoint Protection

Hi,

I've installed a Symantec Endpoint Protection manager (version 11.0.3001.2224) with client version 11.0.4000.2295.

I've enabled the Firewall/Network Thread Protection facility and since then network response is very slow (I get around 30-50 ms round trip delay with pings of 1500 bytes on a 1 Gbps link).
(When I disable the Network Thread Protection, the round trip delay drops to < 1 ms)

When I disable the Firewall Policy in the SEP Manager it doesn't help. I also made a first rule in the firewall ruleset to allow all ip traffic in any direction, but without any result.

Anybody has any idea ?

Cheers,
tom

Hi,

       It would be great if you could let us know the OS on the machine on which the  Symantec Endpoint Protection manager and the client is installed. As  you mentioned that you are running SEPM version 11.0.3001.2224 and on the client side you have 11.0.4000.2295 its always a good practice to have both with the same version.

Hi,

I forgot ...

the OS is windows 2003 standard server SP2.

I've installed the SEP Manager 11.0.3001.2224, which included the client version 11.0.4000.2295.
very bizard :-)

Tom

This is a known issue. Symantec is currently investigating the cause.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009012711494548

Hi,

We have released the latest version of endpoint i.e. MR4 MP2. You can try upgrading and let us know the status.

Hi Sandip,

Ironically, i've installed the latest version this afternoon, and after upgrading the clients, the slow network respone is better.

But with big packets (1500 bytes), we still have around 1-2ms round trip time which would normally be < 1 ms...

Tom