Hi All,
We have a client that bought Symantec Endpoint Protection (version 11.0.780.1109 installed) for the purpose of Anti-Virus protection.
As soon as we installed it, the whole network went dead. The Firewall software blocked pretty much everthing - the server was pingable, but could not be browsed, mapped drives went dead, etc.
We we able to edit the policies to kill it, but a week later it turned itself back on. When things do work, they are VERY, VERY slow (and these are newer computers) but by the most part you cannot browse the network and many other things are just messed up.
I want to simply kill the firewall portion of this software (we have a nice hardware firewall on the gateway) and just have it do AV functions.
How do I do this and distribute it to all workstations?!
Thanks,
T
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
I have 10.1 but i found a kb in the symantec site that shows you how to do that
http://www.symantec.com/bu
Disable the firewall Create a policy with the firewall disabled. To distribute the policy from within Symantec System Center, right-click the desired target, then click All Tasks > Symantec Client Firewall > Update Client Policy Now. On the Clients tab, right-click the group, then click Run Command on Group > Disable Network Threat Protection.
Had the exact same problem and am investigating further. However, I wanted to keep the firewall and antivirus rules enabled and intact on the local workstations. What worked for me, for the time being, was to uninstall the Endpoint Protection client from the server -- with the inaccessible shares -- itself. Voila, it worked and workstations can now access its files shares. The Endpoint Protection management software and console are still installed on the server, all the workstations have the client installed, are still managed from the server and all policies are turned on without issue. BTW . . . am running 11.0.4000.2295. I encourage all to keep up with the updates on this product. I think Symantec is still kinking out the bugs.
We ended up solving the problem by tossing the Symantec product in the trash - it is WORTHLESS! Even after all of the updates, configurations, etc., it slowed the brand new machines WAY down! The cherry on the cake came a few months later when apperantly an automated update re-enabled the firewall to such a degree that DHCP and file-sharing and domain communications could not take place. This is the most idiotic AV software I have seen (and we have been working with Symantec for 12 years!) - the AV is more destructive to your system than 99% of the viruses that it is designed to protect against!!!
After much research, we ended up jumping ship with Symantec and becoming a reseller with ESet - their NOD32 product is pretty good and has half the overhead compared to Symantec. There are a few things I would like to see it do from an administrative side (being a former Norton Corporate admin), but in the end it is a much better solution - we have installed it on about 1000 clients and maybe 80 servers. Only real problem we run into is that the client must be ABSOLUTELY clean of any other AV software - otherwise REALLY STRANGE things happen. On brand new installs, we have yet to have 1 issue.
Business Accounts
Answer for Membership
by: jmlambPosted on 2008-06-03 at 08:30:58ID: 21701393
First thing you'll need to do is upgrade the manager to MR2. The version your customer is running now is pre-MR1, which is riddled with bugs. You can get the upgrade from Symantec's FileConnect website using the serial number.
After the upgrade, create a client install package for each client group that you want to upgrade.
SEPM>>Clients>>Group>>Inst
SEP 11 Client Install Package setup