Questions tagged [symantec-endpoint-protection]

Antivirus and Intrusion Detection/Prevention client from Symantec. Can be either managed or unmanaged by SEPM (SEP Manager)

SEP is a Windows or Linux antivirus and intrusion detection (or intrusion prevention) agent. It can be either managed by one or more SEPM's (and their Group Update Providers - GUP's), or unmanaged, where the local admin can configure the client.

29 questions
8
votes
2 answers

Symantec Endpoint Protection ( SEP / SEPM ) traffic volume management

My organization has a large deployment of Symantec Endpoint Protection (SEP) (~20k clients) with a single SEPM instance running in an ESX VM. We do have many remote clients designated as Group Update Providers (GUPs) where possible. What our…
trp
  • 135
  • 1
  • 7
4
votes
4 answers

Should I upgrade to Symantec Endpoint Protection?

I'm the IT manager at an animal shelter in Upstate New York. We have a Windows network with about 50 desktops running Windows XP Pro. We used to use CA eTrust Antivirus, but that product didn't work too well (too many infections got through). …
3
votes
3 answers

Running SEP scans with the SYSTEM account

I need to run Symantec Endpoint Protection scans on Windows 7 systems using the SYSTEM account. I know that I can run DoScan.exe to manually run a scan, and this works fine using a regular user account. Unfortunately, when I try to run DoScan as…
Eric
  • 249
  • 1
  • 3
  • 15
3
votes
2 answers

Symantec Endpoint Protection Small Business disabling Windows 2008 R2 Firewall, how do I stop this?

We have SEP 12.1 RU1 Small Business Edition and we're deploying to Windows 2008 R2 machines. It seems that SEP is disabling the native firewall. Has anyone seen this? Specifically, The SEP Firewall policy on the management server does not have the…
2
votes
0 answers

Symantec Messaging Gateway brightmail

our Symantec Messaging Gateway birghtmail broke yesterday, the issue no one can login into the script I'm just a normal tech at medium clinic, our system administrator rank quit the job, and now everybody is looking at me to fix it. I do have minor…
2
votes
1 answer

SEPM embedded database stuck on "Starting"

I have recently upgraded SEPM (Symantec endpoint protection manager) from 12.1.4 to 12.1.5. Upgrade completed successfully however the 'Symantec Embedded database' service stuck on 'Starting' status. Tried everything alone and with Symantec support.…
user212398
  • 51
  • 1
  • 5
2
votes
2 answers

Symantec Endpoint Protection Virus Definitions

I have done some Googling but I cannot get a definitive answer certainly not from the Symantec KB. I have a Virtualised Win 2003R2 server 32bit. It has been provisioned to me with Symantec Endpoint Protection 11.0.62xxx CLIENT (not a definitions…
2
votes
1 answer

Installing Symantec Endpoint Protection clients via group policy in a mixed environment

we're upgrading to Symantec Endpoint Protection 12 using group policy in a mixed environment from SAV 10. how can we tell which machines are 32-bit v. 64-bit? we tried looking at the properties in AD Users and Computers to no avail thinking we'd…
Sally
  • 345
  • 2
  • 3
  • 12
1
vote
1 answer

Host infected or NATing for or normal protection service?

As part of my Apache logs, I can frequently observe a sequence of consecutive GET like : 46.235.158.196 - Requesting a file Some other host requesting the exact same file within the same second with the same user agent Being said that…
aCOSwt
  • 113
  • 4
1
vote
0 answers

Why is svchost.exe showing up in Symantec Endpoint Protection as a threat from local server hitting a local web server nonstop?

I'm having a problem where I have a local server machine that shouldn't have anything to do with our local web server, but yet the web server's Symantec Endpoint protection is showing the local server (IP) is constantly hitting the web server and…
DemiSheep
  • 151
  • 1
  • 1
  • 6
1
vote
0 answers

Can I "prime the pump" for Symantec Endpoint Protection Liveupdate?

I have a secure network firewalled from the Internet. I have about 25 linux machines running Symantec Endpoint Protection on this network, connected by a small (2Mb/s) link to my company's "central" network that includes a Symantec Endpoint…
hymie
  • 424
  • 2
  • 11
1
vote
3 answers

How do I delete the DMP files from Symantec Endpoint Protection's Data Install directory?

I have Symantec Endpoint Protection on our server at the directory is full of 1GB DMP files going back 6 months, which has filled the server's disk. I can't seem to be able to delete these files: I've tried the following things without…
1
vote
0 answers

Hyper-V Replication of VMs with Symantec Endpoint Protection Manager and Symantec Mail Security

I'm hoping for some advice on replicating Hyper-V VMs which are running Symantec Endpoint Protection Manager (SEPM) and Symantec Mail Security for Microsoft Exchange (SMSMSE). The problem is the large amount of replication data which is generated by…
djk
  • 11
  • 2
1
vote
1 answer

symantec endpoint protection service stuck at stopping

I am trying to uninstall Symantec Endpoint Protection, but I can't, the services stuck at stopping. Symantec Endpoint Protection is installed on Windows 2003 R2 server. Any suggestions on how to do it without rebooting the server? Thanks!
George
  • 500
  • 4
  • 18
  • 40
1
vote
3 answers

Server 2008 BSOD about once a week

I'm in quite a bind here, hopefully someone can help. Here's what I have: Dell R710 with one Xeon 2.7 GHz processor, 18GB Ram, Server 2008 x64 SP2 I'm running HyperV with about 5 servers. Starting in Jan I've had problems with crashing. First time…
1
2