Endpoint Protection

Hi

We have a webserver that has an unmanaged installation of SEP AV installed on it. It worked fine for many months. We then started experiencing problems with being unable to connect to the server using it's UNC path in order to update files etc... I do not even get an error after trying to connect, the request seems to disappear.

The only way we are able to update files at the moment is by using Remote Desktop and mapping our local drives back from the server within the RDP "Local Resources" options.

The AV program is reporting that it's installation may be corrupt. This is the 2nd time that this has happened, the last time it happened we could not uninstall the AV, kept coming up with errors and we ended installing over the top, this solved the problem for about a month and now it has re-appeared.

Any ideas as to what the root cause of this may be would be greatly appreciated as it is a critical server and I do not want to tamper too much until I am pretty certain as to what is going on. Our backup server also cannot communicate with it's agent on the affected server anymore either, which is causing obvious problems.

Thanks very much for any assistance on this.

let us know what are the componenets of sep you have installed , if you have network threat component installed, uninstall that and check the access.

whats the version of sep you are running, earlier versions had this kind of issues.

Could you please tell us what is the version of SEP installed? As i had seen this issue in prevoius versions of SEP.

You say you only have AV and AVS ,

Take a back of the registry

Go to the registry and serach for teefer2 and delete all instanec of that and then reboot the machine

The version that is running is: 11.0.780.1109 and the error that the application itself reports is that the File System Auto Protect is malfunctioning.

The application itself does not launch when I try to run it, so cannot easily verify the installed components.

Is there another way to verify the installed components?

Also, based on the info I have provided, is the registry edit solution still applicable Prachand?

Thanks for the feedback so far guys, it is appreciated.

Also, when I view the application via the control panel\add remove apps, it reckons that the application is not working correctly and suggests repairing it via the control panel applet.

I do however seem to recall that I had tried this option the last time we ran into this issue and it did not work.

Migrating to Symantec Endpoint Protection 11.0 RU6

It is a very old version .Pls upgrade to RU 6...

that version had loads of issues.....
you are way behind
go to https://fileconnect.symantec.com
put your serial number
download 11.0.6
install it on your machines.
I would suggest you to remove this version and isntall SEP fresh on all your systems..
http://service1.symantec.com/support/ent-security.nsf/docid/2010041310404248

So do you reckon that if I upgrade it to 11.0.6 this will solve the problem or is this a general suggestion. Am trying to establish if the problem that I am experiencing is specifically related to the older versions and if it has been addressed in the newer release.

Also, do you know if I can do a straight over the top install in order to upgrade the version....the reason I ask is that I am pretty sure that I was unable to uninstaller the current version the last time I had this problem and had to install over the top. Bearing in mind that this is an unmanged installation.

Thanks very much

I had already downloaded RU6 last week, am just waiting for a window where I can interrupt the hosting service in order to do this work....it is looking quite likely that this will only be next week Tuesday.

Apologies that my last post asks a few questions that were answered in the previous post, the previous post went up while I was composing mine.   8)

If I am unable to uninstall the current version, do you think that an over the top installation is not going to help?

Thanks v much

You can install in top of that......

Cool, I will try that Tuesday night, thanks for all of your input everyone, it is very much appreciated.

I will be back on the forum on Wednesday to update this thread then.

Regards

Bruce

Remove SEP 11.7
you can postopne the reboot
install 11.0.6
I susepect the issue is with only with the version
install MU6,i'm sure it gonna work.

Hi Rafeeq, as mentioned earlier, I do not think that the uninstall will work, had the same problem previously, so am probably going to just install straight over the existing version.

Another quick question, I am probably missing something pretty obvious here....

The exisiting unmanaged version I have on the web server that is having problems is: 11.0.780.1109, but the version number for the latest version is 11.0.6 which to me looks like an earlier version number??

Could someone clarify this for me please? I just want to make sure that I am doing this right.

Thanks

you are doing it right...11.0.6..is the latest
upgrade wil uninstall the older one and instal lthis. give it a try if not will remove and then install.
if upgrade works we are well and good :)

Ok great. Will post back next week.

Thanks again everyone