Endpoint Protection

Hi,

We have a VPOP3 mail server on a Windows 2003 R2 system with SEP 11 on centrally managed usign the management console, we also have another Windows 2003 Server R2 which has IIS set up and configured to send mail through our VPOP server. When a batch of emails are sent using the other server that has IIS on for example 100 emails at 1MB each they take about 5-10 minutes to send 5 after diagnosing where the issue is we have nailed it down to SEP as if we disable SEP on that machine all the emails go out very swiftly.

I assume the SEP is scanning the mails incoming\outgoing which is what the delay is, as some emails that are sent the same way but are only 5KB send through fine.

What I am wondering is if anyone else has experienced this issue and how they go around it. Are you able to create an exception for an IP\machine at all? I know you can create a centralised exception for a folder but the files are not in a folder at this stage on the VPOP server where the delay is happening.

Any help is greatfully received.

Thanks,

Nick

Do you installed mail scanning component of SEP?If yes try by removing it...

Hi,

Thanks for the reply, apologies if I am being a bit blind or stupid here but I am new to this.

the mail scanning component, what is this and where is it located? Would this be in the mangement console? If you are referring to the 'Internet email auto protect' we have tried to disable this and that has not worked.

Thanks,

Nick

Yes I was referring the same,but in another way.In policy after disabling do you locked it?

Other wise go to add/remove programs--->select sep click change--->next--->modify-->next here you keep only AV/AS (Remove mail mail protect tools also) and try...

Which is the software you are using for mailing purpose?
You may required to create some exceptions..For creating scanning exceptions refer this KB
Making exceptions using centralized exception policies in Symantec Endpoint Protection Manager.Also assure that if you are changing a policy it is getting applied in the client.You may use policy sl. no for tracing it.

Yes the policy is in the SEPM. But if you disable the policy from the SEPM you would see a red mark on the Sheild.

In  Antivirus and Antispyware   look for

Auto-Protect for Internet Email, Microsoft Exchange, or Lotus Notes
Internet Email Auto-Protect:

So it is better to remove the component from the client itself by going into add remove program --> SEP ---> Modify



Title: 'How to add or remove features to existing Symantec Endpoint Protection client installations'
Document ID: 2008111808135348
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008111808135348?Open&seg=ent

Thanks for the replies, I have removed the component from the Add/Remove and that seems to of done the trick.

Thanks for all your help!