Endpoint Protection

Hi All

Has anyone come accross this problem on Server 2008.

I am running SEP 14.0.2415.0200 and it seems that after a second reboot it no longer disables windows firewall which is stopping our backups from working as well as other things.

Is there any fix around this without having to upgrade to the latest version of SEP as we need the backups to work and other applications ASAP.

What versdion of Windows?

See if this KB article is applicable:

http://www.symantec.com/docs/TECH247987

We are on Windows server 2008 disabling windows firwalls in services does indeed fix the problem but I am wondering if there is another way?

There is an option in SEPM to that can be configured to disable the Windows firewall but I imagine this worked fine prior to upgrade?

http://www.symantec.com/docs/TECH197660

This was the closest I could find in the fix notes for RU1:

After disabling the SEP firewall policy, the Windows Firewall erroneously shows “…managed by vendor application Symantec Endpoint Protection…” until a restart

Fix ID: 4013065

Symptoms: You disable the Symantec Endpoint Protection firewall policy in Symantec Endpoint Protection Manager and update the policy on the Symantec Endpoint Protection client. Afterwards, the Windows Firewall on client shows “…managed by vendor application Symantec Endpoint Protection…” until you restart the computer. 

Solution: Updated Symantec Endpoint Protection’s ownership of the Windows Firewall if the action option is “No Action” or if the Symantec Endpoint Protection firewall policy is disabled or withdrawn. This change makes the behavior consistent between before and after restart.

 RU1 MP1 had a fix as well but it was for Windows 10 only.

Thank you this pointed me in the right direction.

The problem was the firewall policy did not copy over form the old to the new server.

I had it set to Disable Once Only where we needed to set it to Disable Always. See the link http://www.symantec.com/docs/TECH197660 to fix the problem.

Just in case anyone else has this problem it’s not a simple as just changing the policy I found this did not disable the windows firewall.

To fix

I disabled the windows firewall manually in services.

uninstall SEP, rebooted

reinstalled SEP, Rebooted

Enabled windows firewall in services and rebooted one final time.

I have a problem with my Windows 10. I was configured as part of domain managed by Symantec Endpoint Protection. I want to remove myself from the domain, but cannot. I cannot access Symantec nor uninstall it. I also cannot do any configuration or access even the registry. IIt constantly asks for an admin username and password. I do not have admin priviledges. How can you help?