Endpoint Protection

 View Only

  • 1.  Applications being removed by Symantec Endpoint Protection 14 RU1

    Posted Nov 20, 2017 05:34 PM

    We're seeing an issue where certain applcations are being removed from our systems after reboots by Symantec Endpoint Protection 14 RU1.

    Among the applications being removed are Chrome, Word, Excel and our IM client.

    Is anyone else seeing this issue?

    We've already tried adding them as exceptions to scans and disabling Memory Exploit Mitigation on the problematic systems.

    Anyone have any ideas how to stop this?



  • 2.  RE: Applications being removed by Symantec Endpoint Protection 14 RU1

    Posted Nov 20, 2017 05:36 PM

    No, not seeing this.

    What component in SEP is doing this? What are they being detected as?

    GEM detections shouldn't remove anything but will terminate the program if a vulnerability exploit is attempted.



  • 3.  RE: Applications being removed by Symantec Endpoint Protection 14 RU1

    Broadcom Employee
    Posted Nov 20, 2017 06:50 PM

    Hello LISIAdmin,

    Was this after an upgrade from a previous version of SEP?  Did you previoulsy have SEP installed to the root of the progran files directory?  i.e. c:\program files\Symantec endpoint protection

    Did you deploy SEP 14 RU 1 using the feature below?


    About the Symantec Endpoint Protection client preinstall removal feature
    HOWTO124989 October 12th, 2017 http://www.symantec.com/docs/HOWTO124989

    Thanks,

     



  • 4.  RE: Applications being removed by Symantec Endpoint Protection 14 RU1

    Trusted Advisor
    Posted Nov 21, 2017 04:31 AM

    Hello,

    Chrome, Word, Excel and your IM client Removed by Symantec Endpoint Protection 14? 

    If it has removed or quarantined, could you let us know which feature has detected these application and as what??

    Request you to assist us with Symantec client logs.

    Regards,