Endpoint Protection

 View Only

  • 1.  Endpoint Protection blocking router IP

    Posted Nov 09, 2014 12:35 PM

    I'm having difficulty keeping a connection to the Internet through a router.  Here is what "Client Management Logs - Security Log" is displaying:

    "Denial of Service "UDP Flood Attack" attack detected.
    Description: An excessive number of User Datagram Protocol (UDP) packets are being generated on this computer causing 100% CPU utilization."

    "Traffic from IP address 192.168.1.1 is blocked from 11/9/2014 11:05:08 AM to 11/9/2014 11:15:08 AM."

    Thanks for any assistance.



  • 2.  RE: Endpoint Protection blocking router IP

    Posted Nov 09, 2014 01:01 PM
    Sounds like you're running 11.0.6. This is a known issue in this version, you need to upgrade to the latest 12.1.5 to fix.


  • 3.  RE: Endpoint Protection blocking router IP

    Posted Nov 10, 2014 01:00 PM

    its blocking the connection for 10 mins exact.

    Might be a false positive, check it twice though

    follow this document

    Automatically blocking connections to an attacking computer

     

    http://www.symantec.com/business/support/index?page=content&id=HOWTO55165