I am having the same problem. Installing MP1 did not resolve it.  Also, when the VPN connection gets hung, Windows will not sleep, hibernate or shut down and the machine has to be power cycled to get it working again. This only happens with Vista, not XP.  Just disabling the SEP client or performing a clean boot does not cure the problem. SEP has to be completely uninstalled. 

Hy Pat,

I might have the solution for you, or at least it worked with me.

Check your Windows Firewall in Vista and disable it.

It appears the Windows Firewall is not disabled during installation of SEPP.

Good luck 

Arno

Thanks Arno, but this did not resolve the problem for me.  I can start and disconnect the VPN connection for a while after I make the first connection, but eventually it gets stuck and will not disconnect. I have found that I can always cause the problem to occur immediately if I run Outlook 2007, connect to an Exchange server on the other side of the VPN, open some messages and then attempt to disconnect the VPN.  Are you able to do this and then successfully disconnect the VPN?

-Pat

Hi Pat,

Before changing the Firewall settings I had the exact same issue.

I mainly focused on shutting down the computer in an orderly fashion, rather than closing the VPN first.

Every time I disconnected the VPN it would simply hang.

If I closed the computer (without closing VPN first) it would also hang on the closing computer screen.

A small work around was to first log-off the user and then shut down the computer from the logon screen.

This worked for me while further trouble shooting the issue.

Does this work for you? If so, it must have something to do with user rights.

Arno

Hi Arno,

About half of the time I can disconnect the VPN by performing a shutdown in Windows.  The rest of the times it hangs during shutdown and I have to power the machine off.  Have you been able to disconnect the VPN after opening messages in Outlook while connected to and Exchange server via the VPN?

Pat

Hi Pat,

I am not really sure if it was Outlook that was causing the problem.

But I always have Outlook running anyway. This is also the main reason wy I need the VPN.

Also File Sharing breaks when this behaviour occures.

Have you tried disabling the Windows Firewall Service?

Arno

Hi Arno,

Yes. I tried disabling the Windows firewall.  I cannot spend any more time on this, so I switched to another antivirus product and this has resolved the problem.  I would have preferred to use SEP, but unfortunately the problem is intolerable because these laptops are moved and put to sleep 5 to 10 times per day. Thanks for all your suggestions!

Pat

Hi there,

has anybody solved this issue? I have the same problem and no idea how to fix it.

Thank you.

Jaroslav

Same EXACT problem here...NOT COOL!!

I have the latest MR2 MP2 update.

My laptop hung at "Logging Off" for over an hour. VPN showed connected with Ipconfig but with a Private IP. In Network & Sharing center, showed Connected, couldn't bring up Status or hitting Disconnect did nothing.

Disabling & re-enabling the LAN adapter did nothing.

Hard power down was the only fix.

C'mon Symantec

As a follow up...this is just affecting Vista per the title?

The current revision of SEP is 11.0.2020.56  (MR2 MP2) and is available on FileConnect.

Sometimes load order matters.  Try this:

Uninstall both the SEP client and the VPN client.  Reboot.

Install the 11.0.2020.56 build of the SEP client.  Reboot.

Install the VPN client.  Reboot.

What result?

I have tested with XP and it doesn't appear to be an issue.

I have the latest MR2 MP2 on my 32bit Vista and it breaks as described in previous posts.

This issue has not been reported to Symantec technical support.  Please open a call with support so they can help you troubleshoot and fix the issue. 

Is this Vista RTM, Vista SP1 or both?

Using the Microsoft built in VPN connection right? 

Vista SP1 and the MS PPTP client built into Windows.

When you connect to the VPN and after a short period disconnect it disconnects properly and will shutdown/reboot normally.

But if you leave the VPN on for an extended time, it just never releases...my BSODs mention RAS something dll...haven't been able to catch it as it hangs forever at Logging Off that I walk away and when I come back and log in, it says System has recovered from an error.

Does it say RasMan.dll and RasSpt.dll ? We have a KB for this, but unfortunately dont have access to it offline. If you could post the exact error message we could be able to provide a solution.

Accessing the forums from my personal PDA.....hence no access to office stuff.....

Did a KB search for rasman.dll and rasspt.dll and neither were found. Looks like my event overwrote the event. I left my VPN connected overnight and came back this am and it had disconnected at some point and re-connecting attempts gave this error:

Only by rebooting can I reconnect again. But it didn't blue screen this time.

Anyone have any new info on this?

Driving me nuts rebooting everytime my VPN drops.

I have just found this thread. Any more news - this is causing me a lot of grief too?

regards

Graham

CityIS

Hello everybody. Our company has all the problems described in this threat. All of using VPNs to different sites so this is really an issue.

I have just found a solution on my computer and I have to discuss it with my colleagues tomorrow but please test it as well and post the result please.

I was able to recreate the issue on fresh installed computer with

SEP 11.0.2020.56

Win Vista Business 6.0 Built 6001 SP1 Czech

MS Outlook connecting over VPN caused VPN to hang in 100% times

MS Outlook 2007 12.0.6316.5000

What have I done (I do translate from Czech system so hope you get it):

Find you VPN definition in Control Panel / Network Connections

Open Properties

select tab Networks

Uncheck Teefer2 Driver

and uncheck TCP/IPv6

for this VPN connection.

I haven't rebooted yet but now I'm able to connect, run Outlook and disconnect.

I have tried about 0 times and still working - this wa snot possible before.

I'm going to reboot my machine.

Jakub

Hi Jakub and all others,

I just read your post and compared my settings to yours given.

I was running Vista Business, but recently upgraded to Ultimate - Dutch.

Outlook 2007 and SEPP 11.2020.56 (MR2 MP2).

Altough I have not seen this issue, since I disabled the Windows Firewall,

I am still following this tread to better understand where this issue comes from.

On my LAN and WiFi adapter IPV6 is enabled, but not used.

I do not have a Teefer2 driver installed there.

On the VPN connection IPV6 is indeed disabled. I do not know why I disabled this anymore, but 

I know Microsoft also has some issue's with IPV6 and some routers do as well.

Today I am working out of the office, so I will try some different setting and post back the results.

Great job ;-)

Arno

Hi,

I have opened a support call with Symantec for this and done some more work. Two things have come out of this so far:

There is a new patch due out in the next few days, which will hopefully address this (hmmm, I think I will wait to see that before I pass judgement)

Second, when I disabled the Network Threat Protection element of EPP the problem disappeared.

So, as a short term work around you could just do that. For slightly longer work around you could push out a new package that does not include NTP.

cheers

Graham

CityIS

Hi all,

  I was a bit too much optimistic with my first post. After many more test&reboots I have found that just disabling Teefer2 driver on my VPN connection doesn't actually help. I had to remove it from the system (uninstall button from network connection properties) BUT this in fact removes SEP firewall :-( After that I have re-enable IPv6 and it still works. So we have bring a temporary solution to all our users. Remove Teefer2 driver and enable Vista native firewall. Now we are waiting for some resolution from Symantec - so thanks to Cityis for opening the support case and let's wait for result.

One more comment - we are using PPTP VPN - may be we should test an L2TP IPSec VPN - I haven't done this yet.

Jakub

Hello Graham,

please could share with us the response to symantec support case you have opened?

I am using latest patch MR3 and the problem still persits.

Thank you in advance.

Regards,

Jaroslav

Hi Guys,

Symantec are still working on this - I believe they are testing a beta of MR4, which seems to fix it - but like before, I won't hold my breath.

I have noticed that if you disable the Network Threat Protection before you fire up the VPN then it works fine - I have been using that as a work around (with MR3), but it does mean that I have not been able to roll out SEP to all my clients yet....( coz that it too hard for salesmen to work out :smileyvery-happy: )

cheers

Graham

Is there a command line option to disable/enable Network Threat Protection?

Disabling it allows my PPTP to work normally.

Hi all,

I must say that I have not seen this issue for the last three months.

At first (months ago) I removed the Teefer2 driver from the network adapter as a work around.

I the mean while whe upgraded to MR3.

Last weekend I had some time left and since I am still monitoring this post for a definitive resolution and out of curriosity, I decided to completly reinstall SEPP on my troubled laptop.

After completly removing all Symantec stuff and a reboot I reinstalled a new and fresh MR3 install package.

Guess what all works well, but the Teefer2 driver is NOT installed.

I checked Network Threat Protection and it appears all green.

Even with the native Windows Firewall runnning and SEPP I did not have any issue's today.

Question is, is teefer2 driver changed or removed in MR3 or why is it not installed at all right now?

Arno

Hi all,

Found this in the new release notes for MR4.

Gonna try this weekend and post back next week.

Laptops with Symantec Endpoint Protection and 4GB RAM stop responding.
Fix ID: 1444613
Symptom: With Symantec Endpoint Protection installed on a laptop running Windows Vista Business 32-bit, upgrade the amount of RAM from 2-3 GB to 4GB. The laptop stops responding after 20-30 minutes.
Solution: Resolved infinite loop in the firewall code.

Random, limited, or no connectivity on laptops with Symantec Endpoint Protection and Juniper VPN client.
Fix ID: 1433195
Symptom: Network connections randomly have limited or no connectivity on laptops with Symantec Endpoint Protection and Juniper VPN client installed.
Solution: Fixed a deadlock issue with the SMC process.

Arno

Hi,

Has MR4 helped anyone with this annoying issue?

Fernando

The Teefer2 driver on the network adapter has been the culprit for this.

Since upgrading to MR4 this is driver is no longer installed.

Our Vista boxes are running fine since the upgrade to MR4.

Right now I have other random issue's with breaking network connections on XP clients, which I did not have before. I have created seperate groups and keep XP boxes at MR3 and Vista at MR4.

Yet again, two steps forward, one step back.

I have not had any problems since movng to MR4

thanks

Graham

p.s. Symantec have closed the ticket I opened

G

It would seem that after upgrading one of my clients to MR4, Vista road warrior is no longer experiencing

the VPN disconnect\OS shutdown issue.  I will give it one more week to see if this is gone for good &

proceed to upgrade the rest of the client base.

Fernando

FWIW teefer2 still appears & is enabled in the MR4 upgraded stack.

Fernandi

I have since moved to another laptop, clean install of Vista x64 Business with all components of SEP11 MR4 client and I still have to disable Network Threat Protection before connecting my PPTP MS VPN client.

While it does work with it enabled...shutting down is still problematic.

After installing 11.0.4000.2295 I have no problem at all.

Using Vista connecting to VPN (Windows2003 Server RAS), running Outlook over vpn, I can start, stop vpn, connect discinnect - no problem.

From my point of view the issue has been resolved.

Jakub

Just FYI, this is from the MR4 MP1 release notes: 

Teefer driver is still shown under network properties after upgrade to Symantec Endpoint Protection 11.0 MR3 or later.
Fix ID: 1293420
Symptom: Teefer2 driver appears in the network properties.
Solution: Teefer2 driver no longer appears in the network properties.

Good luck to you all,

Our problems are solved (for now).