Version
All
Issue
Windows File Shares unresponsive on server with Symantec 12.1 and Bit9
Symptoms
- This could include inability to access network shares.
- Network traces showing errors around SMB packets.
- Network printers not able to resolve ip addresses DNS.
- Deadlocks on file servers.
Cause
Symantec's filter driver, SRTSP64.SYS, is causing a deadlock on threads performing a push lock operation resulting in blocked kernel mode server threads handling SMB requests.
Solution
- Symantec is going to provide a fix in release 12.1 RU6 of their SEP product. Their recommendation is to disable the Auto-Protect deferred scanning feature.
- How to disable deferred scanning in Auto-Protect for Symantec Endpoint Protection: http://www.symantec.com/docs/TECH224108
