Video Screencast Help
Search Video Help Close Back
to help

symantec endpoint protection pop up then printer wont print

Created: 20 Jan 2013 | Updated: 20 Jan 2013 | 6 comments
ljowett3's picture
0 0 Votes
Login to vote

Please help

every time i go to print i get a popup saying

symantec endpoint protection

traffic from ip address xxxxxxxxx is blocked

it blocks it for 10 mins at a time the only way round this i have found is to disable network threat protection in the symantec settings but

this is becoming a real pain please help

oh and please help in easy steps im not very good on my laptop

thanks

Comments 6 CommentsJump to latest comment

Brian81's picture

Is this an unmanaged client?

Open SEP

Next to Network Threat Protection click on Options

Select Configure Firewall Rules

Select Add

Give it a name such as "Allow Printer" and set the Action to Allow this traffic

Click on the Hosts tab and select the IP Address field

Enter in the printer IP address here

You can leave the other tabs alone

Click OK

Move the new firewall rule to the top and click OK

Try to print again

0
Login to vote
ljowett3's picture

once i click on network threat options i have 5 options

1. change settings (which is greyed out)

2. view logs

3. view application settings

4. view network activity

5. disable network threat protection

so if i need to go into 1. change settings I cant get in to it my laptop is a company laptop so not sure what is

disabled when i log on it says im an administrator but dont really know what it means

thanks

0
Login to vote
Brian81's picture

That's the issue. You have a managed client which means it is managed by a SEPM. You will need to alert your admin so they can open it up and give you access to make changes or they need to do it for you. In the mean time you will need to disable NTP to get your printer to work.

0
Login to vote
Ashish-Sharma's picture

Try this

 

the IPs is blocking it

open sepm

policies

intrusion prevenint policy

under the exclude list, exclude your printer.IP

 

 

Thanks In Advance

Ashish Sharma

SEPM Knowledgebase Documents  

 

-1
Login to vote
SebastianZ's picture

In case your client is managed it will be need to perform the exlusions either IPs or NTP from the SEPM Manager side - it is possible youwon't be able to make any changes or disable any features from the client gui.

0
Login to vote
Mithun Sanghavi's picture

Hello,

Try these steps:

Check the Security Logs under Client Management for Denial of Service Detections for the printer's IP address to confirm the issue. 

To resolve the issue you will need to disable Denial of Service detection within your Instrusion Prevention policy or you will need to add the printer's IP address in "Excluded Hosts."

To add the printer to "Excluded Hosts":

1.  Open your Intrusion Prevention Policy.

2.  Choose to Settings on the left. 

3.  Check the box for Enable excluded hosts and then click the Excluded Hosts... button.  

4.  Add the IP address of your printer and choose Okay.  

Reference: 

Denial of service detected on Network Printers

http://www.symantec.com/docs/TECH139213

Hope that helps!!

Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3

Twitter: @mithun_sanghavi

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a

0
Login to vote