Hi Everyone,

I have a customer that complain about SEP not allowing ICS wot work properly using thier Windows 8.1 computer. They can ping yahoo.com but could not load any websites using all browsers. When you turn off the firewall of the SEP client, ICS will work just fine. Do you have any suggestions regarding with the changes I need to do on the firewall policy. We are using default policies for Firewall. When I test ICS using Windows 8 laptop it just works fine. I'm thinking this is related to OS version since I tested Windows 8.1 at our office it could ping yahoo but could not load websites just like the complain of my customer. Thank you in advance for sharing your thoughts about it.

What's the exact version of SEP client ?Do you have try to disable NTP feature ?

Are you using a managed SEP client or a self managed installation ? without Symantec endpoit protection manager...

If you are using a stand alone installation then you  need to check the Firewall logs to check what rule is blocking the connection , based on that we can allow the rule.

use this document to modify the current rule

Firewall Policies on Unmanaged Symantec Endpoint Protection Clients

The SEP client version was 12.1.2. No, I have not yet disable the NTP feature. I only tested disabling the SEP Firewall and ICS works ok. What I wanted to do is make ICS work on Windows 8.1 without disabling the SEP client Firewall.

Rafeeq we are using a managed SEP client.

SEP 12.1.2 are not support Windows 8.1,You can install SEP 12.1.4

SEPM 12.1.4 are first version which are supported windows 8.1

• Windows XP (32-bit, SP2 or later; 64-bit, all SPs; all editions except Home)
• Windows 7 (32-bit, 64-bit, RTM and SP1; all editions except Home)
• Windows 8 (32-bit, 64-bit; Windows To Go is not supported)
• Windows 8.1 (32-bit, 64-bit; Windows To Go is not supported)
• Windows Server 2003 (32-bit, 64-bit, R2, SP1 or later)
• Windows Server 2008 (32-bit, 64-bit, R2, RTM, SP1, and SP2)
• Windows Server 2012 (all editions)
• Windows Server 2012 R2 (all editions)
• Windows Small Business Server 2003 (32-bit)
• Windows Small Business Server 2008 (64-bit)
• Windows Small Business Server 2011 (64-bit)
• Windows Essential Business Server 2008 (64-bit

http://www.symantec.com/business/support/index?page=content&id=TECH212063

http://www.symantec.com/connect/articles/knowledgebase-articles-symantec-endpoint-protection-1214ru4

 

You can install SEP 12.1.4 client on windows 8.1.

James007 I forgot to mention during my test at our office I used Windows 8.1 with SEP 12.1.4. It can ping websites but could not load any websites.

Currently It's SEP 12.1.2 installed Correct ?It's unmanaged client do you have installed in test environment?

Please installed SEP 12.1.4 client and check logs.

If you disable the SEP firewall does ICS work?

_Brian Yes ICS works when you disable SEP Firewall

Check the traffic log to see what rule is blocking this. An exception will need to be made to allow ICS. You can post the log here as well if needed

Check the NTP logs, there should be rule which blocks IPv6 on windows 8. I think its because of that its blocking. Check the logs please.

What logs do I generate???

Please post tralog.log - Firewall Traffic log

Available C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.xxxx.xxx.xxx\Data\Logs

The Traffic log on the SEP client. Should be located under NTP >> Options >> View Logs

You can also export by going to File >> Export and attaching them here if you ned further assistance