Endpoint Protection

Hi,

Need an help. We have disabled SONAR by group policy. But somehow, many clients are showing in disabled status. When i cross checked the reports, Sonar status for some clients are showing "Disabled by policy" and some are showing "component not working".

Can you please help me on how to remove the clients which are in disabled state(because of SONAR) and to make sure that these wont fall in disabled endpoints status again in future.

Hello,

SONAR is the real-time protection that detects potentially malicious applications when they run on your computers. SONAR uses heuristics as well as reputation data to detect emerging and unknown threats. SONAR provides "zero-day" protection because it detects threats before traditional virus and spyware detection definitions have been created to address the threats. 

Sonar is an Integral Part of SEP 12.1 and could not be removed. However, you can disable the protection from SEPM.

Check this Screenshot:

Check this Thread with similar query - 

https://www.symantec.com/connect/forums/how-disable-firewall-and-sonar-status

Hope that answers!!

What is your exact version of SEPM? This was a cosmetic issue in an earlier release.

Hi Mithun,

Yes, we have disabled SONAR. but however event though we have disabled it, these clients are falling under disabled client status in home Tab of Manager console.

Its 12.1.6 MP5