Endpoint Protection

 View Only
  • 1.  Proactive Threat Protection Issues

    Posted Apr 22, 2010 12:31 AM
    We seem to have problems with some server side applications that run from our XP clients.  When the user tries to start the program the system locks up.  You can move the mouse but nothing works.  I have left a machine sit like this for about 5 hours before it responds again.  We thought RU6 was going to fix our issue however it is still happening.  The only way around this was to uninstall TruScan.  Even with the policies set to not have TruScan run the machine will still lock up.  As long as TrueScan isn't installed with the package everything seems to run fine.  

    However, I tested a few programs that we block like UltraSurf and now they are running as well.  We didn't uninstall Proactive Threat or Application and Device control.  We left Network Threat installed as well.  Anyone know why the Application and Device Control stops working when the TruScan piece is uninstalled?

    Thanks,

    Kris


  • 2.  RE: Proactive Threat Protection Issues

    Posted Apr 22, 2010 12:41 AM
    Have you tried creating exclusions for TruScan/PTP for the applications in question?




  • 3.  RE: Proactive Threat Protection Issues

    Posted Apr 22, 2010 12:44 AM
    As far as I know Application and device control will work if you uninstall Truscan.
    Have a look in this KB
    MSI command line reference for Symantec Endpoint Protection 11.0

    This is telling the dependencies...


  • 4.  RE: Proactive Threat Protection Issues

    Posted Apr 22, 2010 12:49 AM
    yes, on the exclusion part.  Problem is the program is never logged within the TruScan detection since the system locks up.  This is a program from Horizon Software called VBOSS.  Well, that is what I see, not sure about much more of it.  The program does dump a few system files in the system32 directory and will create a few registry entries once installed.

    However, I have put an exclusion for the entire directory on the server the client is installed from.  On the file name itself.  

    Still no go.

    We do have a ticket open with support but haven't heard back yet since RU6 was released.  I will double check tomorrow.


  • 5.  RE: Proactive Threat Protection Issues

    Posted Apr 22, 2010 01:35 AM
    the application and device control will not run unless the truscan was enabled
    Reffer to the following link

    http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/364f586cbc36b84388257405006b1269?OpenDocument

    Cheers,
    Ef