Endpoint Protection

 View Only
  • 1.  Modified SEP 12.1 package is killing my network connection

    Posted Aug 01, 2014 02:00 AM

    Hi Everyone

    I have a very bizarre scenario.

    Running SEPM 12.1, with v11 client.

    I have setup a group in SEPM, and added a client package (V12.1) but without the NTP and PTP due to requirement.

    I add my v11 client to the SEPM group. V12.1 client gets installed (without NTP and PTP).

    All good. I reboot few times.

    Then after few hours later i reboot again, and whammo... there goes my network connection.

    I dont get anything... no IP, nothing. Ipconfig gives me nothing.

     

    With a FULL v12.1 client package, i dont have any problems. (althought i dont let SEPM distribute the package. I use SCCM to install this one).

     

    Any ideas everyone?

     

    Thanks, DM.



  • 2.  RE: Modified SEP 12.1 package is killing my network connection

    Posted Aug 18, 2014 02:55 PM

    Still having this issue?



  • 3.  RE: Modified SEP 12.1 package is killing my network connection

    Posted Aug 18, 2014 06:28 PM

    Brian


    Well, i do have few workarounds.

    One being a registry hack to remove Teefer driver to get the network back.

    Another would be to uninstall the V11 client with Cleanwipe and install V12.1 without NTP/PTP.

    However, i have been told by Symantec that i should simply be able to disable the NTP and PTP policies from the SEPM.

    Better yet, our security fella is now on to this, and working out which traffic is being blocked and to workout a new rule in the firewall to allow this traffic through. A better and safer way i think.


    DM



  • 4.  RE: Modified SEP 12.1 package is killing my network connection

    Posted Aug 20, 2014 12:45 AM

    Brian


    We ended up creating a firewall rule to allow the blocked traffic in the end.

    So no need for us to create a separate package to remove PTP/NTP.

    All good now.

    Thanks,

    DM