Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Bit9 coexisting with Symantec 12.1 resulting in network issues

Bit9 coexisting with Symantec 12.1 resulting in network issues

Version
All


Issue

 

Windows File Shares unresponsive on server with Symantec 12.1 and Bit9

 

Symptoms

  • This could include inability to access network shares.
  • Network traces showing errors around SMB packets.
  • Network printers not able to resolve ip addresses DNS.
  • Deadlocks on file servers.


Cause
Symantec's filter driver, SRTSP64.SYS, is causing a deadlock on threads performing a push lock operation resulting in blocked kernel mode server threads handling SMB requests.


Solution

  • Symantec is going to provide a fix in release 12.1 RU6 of their SEP product.  Their recommendation is to disable the Auto-Protect deferred scanning feature.
  • How to disable deferred scanning in Auto-Protect for Symantec Endpoint Protection: http://www.symantec.com/docs/TECH224108





Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎02-24-2015
Views:
637
Contributors