Endpoint Protection

I have been struggling for a while with a memory leak in non-paged pool on a number of computers belonging to an industrial SCADA system. Using "Driver Verifier", I've been able to trace the leak to two driver files belonging to SEP: symefasi.sys and symtdi.sys. The computers are running XP and Server 2003, and because those OS'es have a rather limited non-paged pool (256MB), it gets exhausted after approximately 100 days. This will eventually cause the computer to either respond extremely slow or even crash completely.

The SEP version in use is 12.1.7166.6700 (12.1 RU6 MP7)

Unfortunately, upgrading the operating systems is at the moment not an option.

I can't find anything about correcting for memory leaks in the release notes for the later version 12.1.6 MP8.

Does anyone have a suggestion on how to solve this issue?

If it's a bug/defect, support will need to look at it. They'll need to enable and acquire advanced debug logs for root cause analysis. It will most likely be a code fix, but, perhaps they will know more and have a registry workaround.

How do I get in touch with support in order to initiate an investigation as you suggest?

You can start here:

https://support.symantec.com/en_US/contact-support.html

Or create a case online:

https://support.symantec.com/en_US/mysymantec.html