Endpoint Protection

I just built a Windows Server 2008 64bit virtual machine (VMWare vSphere 4).  When done building the machine I installed SEP 11.0.4202.75 on the machine.  My DBA tried to install SQL 2008 on this machine.  He said that the system ran unbearable slow.  I watched as he tried to install SQL and the machine ground to a near halt.  We uninstalled SEP and the machine ran noticeablely faster.  Any ideas as to why this is occuring and how to fix it?


Rob Allen

 First of all I would recommend you to install 11.0.5002.xx that was released  few days back.
You can download it from https://fileconnect.symantec.com

Make SQL exclusion for SEP Antivirus
http://support.microsoft.com/kb/309422

Upgrade to RU5 as SQL server 2008 is not supported  till SEP MR4MP2. It is supported with RU5


Title: 'Migrating to Symantec Endpoint Protection 11.0 RU5'
Document ID: 2009090313483348
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2009090313483348?Open&seg=ent

 You should also create exclusions for any and all SQL related files...  But you should already know that.

I've had a similar problem, not with SQL running slow but with SEP and performance issues on Windows 2008.  Questions:

Was your DBA accessing the windows server via RDP?
When you installed SEP did you also install the Network Threat protection (NTP)portion of the client?
 If you did install the NTP part of the client do you have a firewall policy enabled?

On my Windows 2008 std x64 system I found that having the NTP installed caused the RDP session to be incredibly slow.  Uninstalling that portion and leaving only the Antivirus/Antispyware portion solved the slowness issue.

I have a ticket open with Symantec Support and the latest recommendation is to install RU5.  I guess I will give that a try and see if it makes any difference.

Looks like RU5 fixed the perfromance problem I was having when installing the Network Threat Protection portion of the client.  BTW, this server is also running MS SQL.

In answer to some of the questions posed to me:

I had installed the SEP client (4202) on the new server.  This server is not the server running the management console.  The DBA was using RDP to access the new server.  I don't remember what items I included in the install package.  I have tried upgrading the Management console to the suggested 5002 but I now have a new problem.  I can't get into the console.  I followed the instructions on migrating to 11.0 RU5.  Now, when I double click on the Management console icon nothing, happens.  I have checked the services to make sure that the manager service is running, it isn't and I can't get it started.  When I try to start the service I get an error mesage saying "Could not start Symantec Endpoint Protection Manager on Local Computer.  Error 1067: The process terminated unexpectedly"  The server that the management console is installed on is a Windows Server 2003 machine and it is our main file server.  Any suggestions?