Product fixes by category:
Symantec Endpoint Protection: Antivirus/Antispyware
After restart, communication between the client and Symantec Endpoint Protection Manager is not established.
Fix ID: 1443855
Symptom: Communication is not established immediately, or drops intermittently after restart.
Solution: Registration information and the last known connected server are now saved in the registry on client shutdown.
Large PowerPoint files open slowly with Symantec Endpoint Protection Auto-Protect enabled.
Fix ID: 1432356
Symptom: It takes several minutes for a 5MB or larger Power-Point file to completely open on Vista.
Solution: Fixed with an update to the Auto-Protect component.
"Tamper protection alert" appears after upgrading from an older version.
Fix ID: 1395857
Symptom: Tamper Protection alert pops up near the end of installation.
Solution: Fixed with an update to the Behavior Blocking component.
Symantec Endpoint Protection clients using the Outlook Scanner are unable to preview JPEG images sent from a Macintosh.
Fix ID: 1461975
Symptom: Clients using the Outlook Scanner for Symantec Endpoint Protection are unable to preview JPEG images sent from a Macintosh machine.
Solution: Implemented a check if this attachment is AppleDouble-encoded. If it is, it is not saved, allowing Outlook to handle it.
LiveUpdate cannot update the virus definitions after an old Intelligent Updater is applied.
Fix ID: 1407607
Symptom: Applying an Intelligent Updater of a couple weeks or older will prevent LiveUpdate from updating virus definitions.
Solution: Fixed with an update to Intelligent Updater.
Symantec Endpoint Protection client uninstallation does not remove LiveUpdate from the system in some migration patterns.
Fix ID: 1441612
Symptom: After an unmanaged 11.0 MR2 Symantec Endpoint Protection client is migrated to 11.0 MR2 MP2 and uninstalled, Live Update will be left on the machine.
Solution: LiveUpdate is now removed correctly upon uninstallation.
Opening Microsoft Word 2007 "docx" files on Windows Vista takes longer than on Windows XP.
Fix ID: 1399868
Symptom: Noticeable delays occur when trying to open Microsoft Word 2007 "docx" files on Windows Vista.
Solution: Fixed with an update to the Auto-Protect component.
Veritas clustering is unable to fail over due to Symantec Endpoint Protection locking volumes.
Fix ID: 1439705
Symptom: Attempts to take a server offline are initially possible but cease to work after an undetermined length of time. Once you stop the Symantec Endpoint Protection service, taking the server offline works correctly again.
Solution: Fixed in an update to the Common Client component.
After uninstalling Symantec Endpoint Protection and restarting, some registry keys still exist.
Fix ID: 1223463
Symptom: After uninstalling Symantec Endpoint Protection and restarting, some registry keys are left behind in the HKEY_CURRENT_USER hive.
Solution: Added custom action to Symantec Endpoint Protection installer to enumerate and delete necessary registry keys during uninstall.
LUALL CPU usage of 50% and memory size increases until system stops responding when LiveUpdate launches via a schedule.
Fix ID: 1473616
Symptom: LUall.exe consumes CPU and memory starting at 50% until the system stops responding.
Solution: Fixed hard loop when certain scenarios or states are detected during LiveUpdate.
Offline Microsoft Office files opening as "corrupt" or "encrypted."
Fix ID: 1442180
Symptom: When opening Office documents, the Office file conversion assistant will open and show what appears to be a corrupted (or encrypted) document.
Solution: Fixed with an update to the Auto Protect component.
Workstation freezes when copying over a network share.
Fix ID: 1383615
Symptom: Copying files over a network share freezes the share or the workstation.
Solution: Fixed with an update to the Behavior Blocking component.
When migrating from Symantec AntiVirus 10.1.7, the installation pauses for up to five minutes at the end of the installation before completing.
Fix ID: 1423539
Symptom: When migrating from Symantec AntiVirus 10.1.7 to Symantec Endpoint Protection 11.0 MR2, MR3, or MR4, the installation pauses for about 5 minutes at the end of the installation before actually completing.
Solution: Improved the checks for proper registry key settings.
Outlook Auto-Protect corrupts files with Unicode characters in the file name.
Fix ID: 1405173
Symptom: Attachments with Unicode file names appear empty.
Solution: If the file name passed to the Outlook Plug-in is invalid, Auto-Protect now lets Outlook write the attachment.
MSL crash in Common Client.
Fix ID: 1407121
Symptom: Logs show MSL crash in component Common Client 6.3.7.
Solution: Fixed with an update to the Common Client component.
UPHClean points to RTVScan.exe as the root cause of a profile unloading issue on Windows 2000 Professional.
Fix ID: 1484409
Symptom: RTVscan does not shut down within the time allowed by the Windows 2000 system shutdown, causing a Userenv error.
Solution: Added extra checks to verify if COM already initialized.
Cleanwipe tool prompt asks, "Do you want to uninstall Windows related files that Symantec installed?"
Fix ID: 1469385
Symptom: Cleanwipe presents a confusing prompt which asks, "Do you want to uninstall Windows related files that Symantec installed?".
Solution: The prompt text has been changed to "Do you want to uninstall the files that Symantec installed under the Windows directory, if removing these files will not harm your system?"
When Cleanwipe runs silently, the blank DOS box does not indicate that the tool is working.
Fix ID: 1469470
Symptom: When Cleanwipe runs silently, the blank DOS box does not indicate that the tool is working.
Solution: New command line parameter -showprogress is added, which displays verbose output to the command window.
When Scheduled LiveUpdate configuration is used from the Symantec Endpoint Protection user interface, it is saved incorrectly.
Fix ID: 1484916
Symptom: Set the weekly LiveUpdate schedule to a particular day. Re-open the LiveUpdate schedule dialog to see the day moved back 2 days.
Solution: While saving the schedule in the registry, convert the local day index to the Symantec Endpoint Protection day index.
USB hard drives can't be safely removed after context menu scan completes successfully.
Fix ID: 1410194
Symptom: After running a scan with default settings, an attached USB hard drive can no longer be safely removed. If you terminate RTVScan.exe, you can then safely remove the drive.
Solution: Fixed in an update to the Common Client component.
Symantec Endpoint Protection displays two Symantec Tamper Protection Alerts when installing Backup Exec over the network.
Fix ID: 1473579
Symptom: Tamper Protection Alerts occur during Backup Exec installation.
Solution: Network installation no longer triggers Tamper Protection alerts.
Symantec Endpoint Protection patching may cause "Resolve Source" after LiveUpdate of WpsHelper.
Fix ID: 1505190
Symptom: Patching Symantec Endpoint Protection 11.0 may result in a "Resolve Source" during the patch process.
Solution: Added WpsHelper to the full file patch list.
High Explorer.exe CPU usage when touching exported Symantec Endpoint Protection client package.
Fix ID: 1470577
Symptom: Explorer.exe has high CPU usage in Task Manager.
Solution: Fixed in an update to the Auto-Protect component.
Symantec Endpoint Protection: Firewall
A managed Symantec Endpoint Protection client displays a "Collect User Info" pop-up before the delay time has elapsed.
Fix ID: 1455613
Symptom: User information collection pop-up reappears, even though the delay time has not elapsed after logging in again or restarting.
Solution: Save the delay time to Registry on firewall service stop, and restore its value on firewall service start.
Blue screen errors due to Teefer2 being on: PAGE_FAULT_IN_NONPAGED_AREA (50).
Fix ID: 1450271
Symptom: Computer stops responding with a blue screen, and displays an error.
Solution: Corrected how network card data is forwarded and cleared from memory.
The Driver_Level_Protection_(DLP) doesn't work even when the option shows normal in Profile.xml.
Fix ID: 1481759
Symptom: Cannot block IPX packets.
Solution: Updated the handling of IPX packets.
SMC.EXE application crashes when more than 16 DNS servers are configured in the TCP/IP properties.
Fix ID: 1471456
Symptom: If a user creates more than 16 DNS servers, SMC.exe will crash.
Solution: Add the boundary check when copying DNS servers from Netport to SMC.
Teefer driver is still shown under network properties after upgrade to Symantec Endpoint Protection 11.0 MR3 or later.
Fix ID: 1293420
Symptom: Teefer2 driver appears in the network properties.
Solution: Teefer2 driver no longer appears in the network properties.
Microsoft Expression Design 2 will not start when Application and Device Control policy is enabled.
Fix ID: 1482773
Symptom: This .NET program crash when Application and Device Control is enabled.
Solution: Updated a Symantec driver to prevent the crash.
Application and Device Control causes custom application to fail on Windows 2000 computers.
Fix ID: 1470672
Symptom: If Application and Device Control is enabled, "TASKING EDE" will fail to start on Windows 2000 SP4.
Solution: Updated a Symantec driver to prevent the error.
Portscan detections are inconsistent.
Fix ID: 1456195
Symptom: Some port scan parameters result in inconsistent detections.
Solution: Check all the TCP packets, regardless of the TCP flags.
Application and Device Control causes Inova Lightlink software to fail.
Fix ID: 1472582
Symptom: If Application and Device Control is enabled, Inova Lightlink software crashes.
Solution: Application and Device Control was corrected to support such .NET applications.
Unable to connect to any shares on Windows XP with Symantec Endpoint Protection MR 3 or later installed and Network Threat Protection enabled on Japanese-language operating system.
Fix ID: 1447741
Symptom: On a Japanese language Windows XP operating system, ports 139 and 445 are blocked by default after Symantec Endpoint Protection 11.0 is installed. This does not occur on English Windows XP.
Solution: Added TCP and UDP rules for file sharing.
Symantec Endpoint Protection Manager Quick Reports show OS codes instead of OS names.
Fix ID: 1447318
Symptom: Client inventory report shows an odd entry.
Solution: Added appropriate localization entry for Windows 2003 Enterprise Domain Controller and Windows 2000 Advanced Server Domain Controller.
Pillar Trim application does not start when Symantec Endpoint Protection is installed.
Fix ID: 1482423
Symptom: This .NET program will crash when Application and Device Control is enabled.
Solution: Application and Device Control was corrected to support such .NET applications.
Application rules do not persist after restart.
Fix ID: 1447262
Symptom: Once a user chooses which applications to allow or deny, they are added to the application list. This list is cleared when the computer is shut down. The user is presented with the alerts again the next time the applications are started
Solution: Application rules now persist across restart.
VNCon application will not start when Application and Device Control policy is enabled.
Fix ID: 1473568
Symptom: VNCon application cannot run when the Application and Device Control Policy is in effect.
Solution: Updated a Symantec driver to allow the application to run.
If only one Symantec Endpoint Protection client exists, the client is unable to establish communication with Symantec Endpoint Protection Manager.
Fix ID: 1486698
Symptom: A single client cannot communicate with the server.
Solution: Improved handling of a single client count.
Application and Device Control conflicts with DMES software.
Fix ID: 1477161
Symptom: With Application and Device Control enabled and when DMES is running, the newly launched Internet Explorer will hang.
Solution: A Symantec driver was modified to allow the application to run.
Fingerprint no longer takes effect when an .exe file is moved to a new folder and the folder is re-named.
Fix ID: 1295598
Symptom: With OS Protection enabled, add a rule to block an application running with file fingerprint. When renaming the folder containing the application the rule doesn't work.
Solution: Fixed in OS Protection block rules.
SMB protocol traffic is sent to the detection engine with a 1-6 minute delay.
Fix ID: 1480679
Symptom: SMB protocol traffic triggers the Intrusion Protection signature, but traffic to the IPS engine is delayed by 1-6 minutes.
Solution: Fixed in a component update.
Computer stops responding with a blue screen while the computer is idle.
Fix ID: 1480602
Symptom: Computer stops responding with a blue screen while the computer is idle.
Solution: Fixed in a component update.
Port client connection timeout from Symantec Endpoint Security Maintenance Release 3.
Fix ID: 1486881
Symptom: Client timeout value for establishing connection with the server to download client packages is low and causes frequent failures, particularly if the network is slow between the client and Symantec Endpoint Protection Manager.
Solution: Increased timeout value.
Symantec Endpoint Protection continues downloading the same definition file when the disk is full.
Fix ID: 1472608
Symptom: Even when the disk space is full, the client will make attempts to download and apply LiveUpdate content.
Solution: Roughly estimate how much disk space is required before attempting the content download.
Cannot configure Veritas Cluster Service (VCS) when Symantec Endpoint Protection is present.
Fix ID: 1487863
Symptom: Cannot configure VCS with Symantec Endpoint Protection present.
Solution: A Symantec driver was modified to allow the application to run.
Symantec Endpoint Protection Manager
Limited Administrator scheduled reports can become "invisible."
Fix ID: 1472513
Symptom: Limited Admin's Scheduled reports can become "invisible."
Solution: Kept the "created by" field when updating a report.
Auto-refresh of Computer Status Logs causes different logs to be shown.
Fix ID: 1469309
Symptom: When viewing the Computer Status Logs with the count per page at 1000 entries, enable auto-refresh at 30 second intervals. After a refresh, the row count drops dramatically (between 20-30). The full list is restored if auto-refresh is disabled.
Solution: All entries are now viewable when auto-refresh is enabled.
Server certificate is missing from the client's Sylink.xml.
Fix ID: 1472560
Symptom: Some Symantec Endpoint Protection Manager sites and server certificates are missing in sylink.xml.
Solution: Symantec Endpoint Protection Manager was modified to resolve the problem.
Configured Notifications fail to be created as expected.
Fix ID: 1446178
Symptom: No Application Device Control events trigger notifications, even when the option is configured.
Solution: Added a new attribute to policies for checking whether a notification should be sent.
Cannot open location-independent policies and settings for certain Symantec Endpoint Protection Manager client groups.
Fix ID: 1474607
Symptom: Clicking Clients > Policies > General Settings does nothing.
Solution: Get default attribute value if Symantec Endpoint Protection Manager cannot get optional one.
In the Computer status log, the sort function does not work for the "Infected" column.
Fix ID: 1453826
Symptom: In the Computer status log, the sort function does not work for the "Infected" column.
Solution: Added a sort function to column "Infected."
After repair, Symantec Endpoint Protection Manager malfunctions in some environments.
Fix ID: 1470381
Symptom: User cannot log into the console after the installation is repaired.
Solution: Back up files and restore them later, so that those files are always kept during repair and migrate installations. |