Endpoint Protection

When I went to MU5, if the symantec client management service is running, my network users have slow logons, they lose the ability to access shares, and the server loses connectivity (can't even ping in or out).  If I stop the service, things are fine.  I need to know how to keep the service running without these problems.

If you have installed the Network Threat Protection feature try uninstalling it through add/remove programs on one client machine. The reason being that this feature is similar to that of a Firewall and can block incoming/outgoing traffic in case its not configured correctly. If this resolves the issue then from the SEPM create a new install package without the NTP feature and push it to all the clients in the network.

Network threat protection is only installed on the server itself.  Shall I uninstall that component at the server and then start the smc service?  The clients do not have NTP installed.

Thanks.

Would suggest you to either unistall Network Threat Protection from the server ( add/remove programs  - SEP - modify -de-select Network Threat Protection -next - install )
Or configure your firewall rule to allow file and print sharing ports.. 

You mentioned that you upgraded so I might be useful to know what version and you had before and if you added any new features when you upgraded to RU5. An example would be that you used to not have NTP installed on the SEPM but now you do ect ect.

Thanks
Grant

I just did a straight upgrade with no new features.  I alsways had NTP installed on the server.   I was using MR2.   I will try the uninstall Monday and will report back.

Best

I've been getting lots of complaints about this kind of thing here too.

I updated our MR2 clients with no Network Threat Protection switched on to 11.0.4014.26 with Network Threat Protection on earlier this year and started getting lots of complaints about slow logins, machines hanging, documents not opening quickly from servers. I put it down to the version of SEP and updated to RU5 but nothing changed.

Uninstalling the Network Threat Protection part of things seems to be fixing a lot of the issues.

The probem is one of the reasons we bought SEP was for Application and Device control which you can't do unless you've got Network Threat Protection installed and enabled. Having a hard time explaining to the boss that all that money we spent on SEP looks to be wasted as we can't use the functionality we want!

 @Mahilu-- I would recommend having a test environment with Network Threat Protection ON..then apply the firewall rule to allow all..then you shouldn't have any issue with the firewall..and at the same time you can benefit with IPS Detection protection.

Could you provide a step-by-step process for applying that firewall rule?  I would like to try that before just uninstalling NTP.  I will do this late tonight, when everyone is gone home - as a test.  If it does not work, I will test out the uninstall option.  Thanks.

 . Open Symantec Endpoint Protection Manager Console.
2. Login in admin rights.
3. Select "Policies" on the left pane.
4. Select firewall policy
5. Add rule
6.Select network service
7.Add network neigborhood browsing and sharing
apply to all the group

Thanks.  I will test this out and will report back and will mark "solved" with the solution.

 You can also try Adding a Blank Rule ( that is allow all )
Once you edit the firewall policy
then bottom right you will see add rule and add blank rule.
Highlight that rule then next to add blank rule you will find move up.
Move the rule to the top ..click OK on the policy and assign this policy to the groups in which you have the servers.

I tried the firewall fixes to no avail.  I ended up just uninstalling NTP.  All set.  Thanks.