Release notes for Symantec Endpoint Protection 11.0.x and Symantec Network Access Control 11.0.x

Symantec.com > Enterprise > Support > Knowledge Base

Release notes for Symantec Endpoint Protection 11.0.x and Symantec Network Access Control 11.0.x

Question/Issue:
This article documents the changes and fixes in each update to Symantec Endpoint Protection 11.0.x and Symantec Network Access Control 11.0.x.

Solution:
As updates to Symantec Endpoint Protection are released, they are added as sections in this document. The sections are added in chronological order, with the most recent additions at the top. For information about how to obtain the latest build of Symantec Endpoint Protection, read the following document: Obtaining an upgrade or update for Symantec Endpoint Protection 11.x or Symantec Network Access Control 11.x.

Maintenance Release 3 (MR3)

Component versions in MR3

Major Components

Symantec Endpoint Protection 11.0.3001.2224

Client Management Component 11.0.3001.2224

Symantec Network Access Control 11.0.3001.155

Symantec Endpoint Protection Manager 11.0.3001.2224

Minor Components

Auto-Protect 10.2.6.5

Behavior Blocking 3.3.7.004

COH 6.1.6.3

Common Client 6.3.7.009

DecABI 1.1.1.39

Defutils 3.3.20.0

QServer 3.6.16

SyKnAppS 2.5.0.12

SymEvent 12.5.3.3

SymNetDrv 7.2.3.302

WpsHelper 11.0.717.804

Symantec Endpoint Protection client fixes

Corrupted string in User Information when using Japanese string

Fix ID:

Symptoms:

Solution:

Cannot create an "ignore" exception for some proactive detections

Fix ID:

Symptoms:

Solution:

20-20 Design software does not load properly with Sysplant enabled

Fix ID:

Symptoms:

Solution:

Symantec Endpoint Protection service stops and starts repeatedly on Windows 2000 Terminal Server

Fix ID:

Symptoms:

Solution:

Unable to configure Application Control for Binary or DWORD registry values

Fix ID:

Symptoms:

Solution:

Symantec AntiVirus to Symantec Endpoint Protection 11.0 migrated scheduled LiveUpdate settings are not properly reflected in the Symantec Endpoint Protection 11.0 user interface

Fix ID:

Symptoms:

Solution:

Terminal servers run multiple instances of ProtectionUtilSurrogate.exe

Fix ID:

Symptoms:

Solution:

Cannot schedule LiveUpdate on a unmanaged 64-bit client

Fix ID:

Symptoms:

Solution:

After upgrading from Symantec AntiVirus, the Symantec Endpoint Protection 11.0 client appears to have continuous QuickScans running

Fix ID:

Symptoms:

Solution:

High CPU utilization on Terminal Servers with multiple active sessions

Fix ID:

Symptoms:

Solution:

Lexware software fails with Application and Device Control

Fix ID:

Symptoms:

Solution:

Mitek's Truss Engineering design software fails to load with Application and Device Control installed

Fix ID:

Symptoms:

Solution:

Location Awareness fails to switch locations correctly when using wireless connections

Fix ID:

Symptoms:

Solution:

Unable to stop users from stopping a scan when configuring the client to be able to snooze a scan

Fix ID:

Symptoms:

Solution:

Microsoft Dynamics application crashes in RDP session with Network Threat Protection enabled

Fix ID:

Symptoms:

Solution:

Active Scan fails to launch after definitions are updated

Fix ID:

Symptoms:

Solution:

Clients that cannot access the Group Update Provider (GUP) for updates fail over to Symantec Endpoint Protection Manager

Fix ID:

Symptoms:

Solution:

Unable to run Ice Sword rootkit detection tool with Symantec Endpoint Protection installed

Fix ID:

Symptoms:

Solution:

Symantec Endpoint Protection client does not write an event when NTP is re-enabled

Fix ID:

Symptom:

Solution:

Symantec Endpoint Protection client fails to communicate with manager when explorer.exe is not loaded

Fix ID:

Symptoms:

Solution:

Multiple Systray icons appear after launching Citrix applications

Fix ID:

Symptoms:

Solution:

"Log files written to USB drives" only logs the first file copied

Fix ID:

Symptoms:

Solution:

Uninstalling the email tools does not remove ccEmlPxy.dll

Fix ID:

Symptoms:

Solution:

Cannot save Word 2003 file changes to a cluster server

Fix ID:

Symptoms:

Solution:

Firewall rules created through learned applications do not block and write to log

Fix ID:

Symptoms:

Solution:

SMC –stop command fails when User Account Control (UAC) is enabled

Fix ID:

Symptoms:

Solution:

System log entry shows "Stop serving as the GUP" though client was never a GUP

Fix ID:

Symptoms:

Solution:

With Remote Registry Service disabled, Symantec Endpoint Protection 11.0 MR2 fails to install

Fix ID:

Symptoms:

Solution:

Risk declared as clean but still shows a red 'X'

Fix ID:

Symptoms:

Solution:

IPS detections do not contain the IP of the local machine

Fix ID:

Symptoms:

Solution:

SymCorpUI.exe hangs while scanning

Fix ID:

Symptoms:

Solution:

SMC crash on Windows XP Service Pack 2 with Nortel VPN Client installed

Fix ID:

Symptom:

Solution:

Location Switching Criteria "Aventail SSL VPN" fails

Fix ID:

Symptom:

Solution:

ccApp causes a runtime error during e-mail download

Fix ID:

Symptoms:

Solution:

Consortium Conference Client Forum fails to open with Symantec Endpoint Protection installed

Fix ID:

Symptoms:

Solution:

Windows 2008 dropping network shares with AutoProtect enabled

Fix ID:

Symptoms:

Solution:

Cannot change System Recovery settings with Application and Device Control

Fix ID:

Symptoms:

Solution:

Delay occurs when logging out of a Remote Desktop session with Symantec Endpoint Protection installed

Fix ID:

Symptoms:

Solution:

Symantec Endpoint Protection client reports that Network Threat Protection is active even though it is not installed

Fix ID:

Symptoms:

Solution:

Initial DHCP traffic is allowed even if a rule in place is configured to block all traffic

Fix ID:

Symptoms:

Solution:

Users can snooze scans indefinitely

Fix ID:

Symptoms:

Solution:

PTV America's VISSIM software fails to load with Application and Device Control installed

Fix ID:

Symptoms:

Solution:

Application and Device Control installed with ZENRIN its-moNAVI causes an application crash

Fix ID:

Symptoms:

Solution:

Location Awareness displays as disabled in the client's troubleshooting user interface

Fix ID:

Symptoms:

Solution:

Symantec Endpoint Protection user interface hangs when the operating system is set to Traditional Chinese language input

Fix ID:

Symptoms:

Solution:

Cannot deploy a client package without the out of date definition warnings appearing

Fix ID:

Symptoms:

Solution:

Symantec Endpoint Protection 11.0 MR2 MP2 Outlook e-mail plug-in strips attachments

Fix ID:

Symptoms:

Solution:

Certain DOS applications fail with Application and Device Control enabled

Fix ID:

Symptoms:

Solution:

Oracle Discover 3.1 fails with Application and Device Control installed

Fix ID:

Symptoms:

Solution:

Symantec Endpoint Protection Manager fixes

Symantec Endpoint Protection Manager incorrectly parses the client inventory data forwarded from Symantec AntiVirus Reporting agents

Fix ID:

Symptoms:

Solution:

Manager Server Configuration Wizard does not accept special characters

Fix ID:

Symptoms:

Solution:

Unable to configure the definition warning message in the manager

Fix ID:

Symptoms:

Solution:

Symantec AntiVirus server names and client groups are not listed for some server groups when using the Symantec Endpoint Protection Manager migration wizard

Fix ID:

Symptoms:

Solution:

The Symantec Endpoint Protection Manager password lifetime is hard coded

Fix ID:

Symptoms:

Solution:

The list of Known Security Risk Exceptions is longer on the Symantec Endpoint Protection client than it is in Symantec Endpoint Protection Manager

Fix ID:

Symptoms:

Solution:

An export button is missing from the export search data dialog box

Fix ID:

Symptoms:

Solution:

Symantec Endpoint Protection Manager fails to update virus definitions or policies to clients

Fix ID:

Symptoms:

Solution:

Inconsistent notifications when configuring Risk outbreak notifications using a damper control

Fix ID:

Symptoms:

Solution:

GUP fails to update clients

Fix ID:

Symptoms:

Solution:

Symantec Endpoint Protection Manager limited administrators can still perform administrator tasks

Fix ID:

Symptoms:

Solution:

Administrators log off time is always the same as the last log-in time

Fix ID:

Symptoms:

Solution:

Installing Symantec Endpoint Protection Manager to a custom web site will remove similarly named directories from the default Web site

Fix ID:

Symptoms:

Solution:

Symantec Network Access Control Appliance shows online and connected to Symantec Endpoint Protection Manager even though required Symantec Network Access Control upgrade is not installed

Fix ID:

Symptoms:

Solution:

Port 1812 error when installing Symantec Endpoint Protection Manager

Fix ID:

Symptoms:

Solution:

Synchronization and import errors occurs when deleting a Directory Server from the first Symantec Endpoint Protection Manager

Fix ID:

Symptoms:

Solution:

In the Policies tab, the feature "Replace the Policy" doesn't work for the IPS policy

Fix ID:

Symptoms:

Solution:

Unable to configure Symantec Endpoint Protection Manager to send e-mail notifications on a non-standard port

Fix ID:

Symptoms:

Solution:

An option to save reports is not available in Symantec Endpoint Protection Manager

Fix ID:

Symptoms:

Solution:

Scheduled LiveUpdate for Symantec Endpoint Protection Manager does not work within specified time frame

Fix ID:

Symptoms:

Solution:

Special characters in client computer description cause error

Fix ID:

Symptoms:

Solution:

After migrating Symantec Endpoint Protection Manager, policies and content are not being pushed to the client

Fix ID:

Symptoms:

Solution:

Replication of the databases takes up large amounts of drive space

Fix ID:

Symptoms:

Solution:

The reporting dashboard doesn't specify the amount of data that is being displayed

Fix ID:

Symptoms:

Solution:

Computer Status Log [Detail] and [Export] link do not have correct date/time

Fix ID:

Symptoms:

Solution:

Symantec Endpoint Protection Manager auto log sweep does not log when it runs

Fix ID:

Symptoms:

Solution:

Host Group name does not change in the Firewall Policy interface

Fix ID:

Solution:

Find Unmanaged Computers not returning Symantec AntiVirus version installed after discovery

Fix ID:

Symptoms:

Solution:

Downloaded Command filter in reporting does not report anything

Fix ID:

Symptoms:

Solution:

Symantec Endpoint Protection Manager Administrator is able to view restricted data

Fix ID:

Symptoms:

Solution:

"Failed to export to Group" when exporting installation packages

Fix ID:

Symptoms:

Solution:

Installing Symantec Endpoint Protection Manager to a SQL database with a custom DSN port, Symantec Endpoint Protection Manager log on will fail until Symantec Endpoint Protection Manager is configured to use a static port

Fix ID:

Symptoms:

Solution:

The "change password" link is missing from the Admin\Tasks

Fix ID:

Symptoms:

Solution:

Query fails on the computer status log page when the max limit is set to 1000 rows

Fix ID:

Symptoms:

Solution:

Limited Admin restricted to one group can view all learned applications globally in a Symantec Endpoint Protection Manager site

Fix ID:

Symptoms:

Solution:

Several policy changes generate broken links

Fix ID:

Symptoms:

Solution:

"Unable to read xml file" error in SesmLU.log when Symantec Endpoint Protection Manager using non-default data folder

Fix ID:

Symptoms:

Solution:

Temp files build up on server when backing up sem5 database

Fix ID:

Symptoms:

Solution:

OU import fails with errors when importing from the domain level through LDAP

Fix ID:

Symptoms:

Solution:

Restored backup does not sync Settings.LiveUpdate file and Symantec Endpoint Protection Manager user interface configuration

Fix ID:

Symptoms:

Solution:

Cannot deploy clients to Organizational Units that have commas in the name

Fix ID:

Symptoms:

Solution:

Risk log does not show up in Symantec Endpoint Protection Manager

Fix ID:

Symptoms:

Solution:

Tomcat hangs when generating scheduled report

Fix ID:

Symptoms:

Solution:

Symantec Endpoint Protection Manager > Monitor > Logs does not maintain report after command initiated using custom filter

Fix ID:

Symptoms:

Solution:

Assigning a policy to a group takes too long

Fix ID:

Symptoms:

Solution:

Symantec Endpoint Protection Manager OU Import issues if "Description field" contains escape characters \n, \u, \N, or \O

Fix ID:

Symptoms:

Solution:

System Administrator cannot view reports created by Administrators in Symantec Endpoint Protection Manager

Fix ID:

Symptoms:

Solution:

Display filter does not retain changed settings after closing Symantec Endpoint Protection Manager

Fix ID:

Symptoms:

Solution:

Exporting the Application and Device Control Logs crashes due to invalid characters

Fix ID:

Symptoms:

Solution:

Symantec Network Access Control fixes

Gateway Enforcer set to Fail Open and disable settings will not save after reboot

Fix ID:

Symptoms:

Solution:

Maintenance Patch 2 for Symantec Endpoint Protection Maintenance Release 2 (MR2 MP2)
This section describes the fixes in Maintenance Patch 2 for Maintenance Release 2.

About Maintenance Patch 2
This Maintenance Patch cannot be installed over the 11.0.0 or 11.0.1 versions of Symantec Endpoint Protection Manager. It must be installed over Maintenance Release 2, either with or without Maintenance Patch 1. For information about how to obtain the latest build of Symantec Endpoint Protection, read the following document: Obtaining an upgrade or update for Symantec Endpoint Protection 11.x or Symantec Network Access Control 11.x.

Components included in Maintenance Patch 2

Major components

Component	Version
Symantec Endpoint Protection	11.0.2020.56
Client Management Component	11.0.2020.21
Symantec Network Access Control	11.0.2020.8
Symantec Endpoint Protection Manager	11.0.2020.26

Minor components

Component	Version
AMS	6.12.0.148
Auto-Protect	10.2.4
Behavior Blocking	3.3.7
COH	6.1.2.3/6.1.3.20
Common Client	106.3.6.9
DecABI	1.1.1.39
DefUtils	3.3.11.0/3.3.16.0
ECOM	61.3.0.17
QServer	10.1.8.8000
SyKnAppS	2.5.0.12
SymEvent	12.5.3.3
SymNetDrv	7.2.1.110
Teefer2	11.0.1836.12
WpsHelper	11.0.717.804
VxMs (MSLight)	5.1.1.0

New fixes in Maintenance Patch 2

Symantec Endpoint Protection Manager fixes

Unable to delete older Install Packages after migrating to MR2

Fix ID:

Symptom:

Solution:

After migrating to Symantec Endpoint Protection Manager MR2, unable to export MR2 client install packages

Fix ID:

Symptom:

Solution:

Domains that have been deleted from Symantec Endpoint Protection Manager are still showing up in Reporting

Fix ID:

Symptom:

Solution:

Centralized Exception appears 14 times in Symantec Endpoint Protection Manager interface

Fix ID:

Symptom:

Solution:

Domain administrator can view groups that belong to another domain

Fix ID:

Symptom:

Solution:

A case sensitive security check prevents the command/policy publishing from completing

Fix ID:

Symptom:

Solution:

The antivirus definition version shown in the Symantec Endpoint Protection Manager console does not match the definition version shown in the client UI

Fix ID:

Symptom:

Solution:

Mdef25builder blocks other Symantec Endpoint Protection Manager processes

Fix ID:

Symptom:

Solution:

Internal site-wide "is LiveUpdate running" flag is set incorrectly

Fix ID:

Symptom:

Solution:

Slow imports from Active Directory OUs and creating locations

Fix ID:

Symptom:

Solution:

0Kb .dax files appear on the Symantec Endpoint Protection Manager

Fix ID:

Symptom:

Solution:

Symantec Endpoint Protection client fixes

Application List not saved properly after restart

Fix ID:

Symptom

Solution:

Application error CCMExec.exe when upgrading from 10.2 MP1

Fix ID:

Symptom

Solution:

Symantec Endpoint Protection client does not switch from External location when switching from wireless to Ethernet connections

Fix ID:

Symptom

Solution:

Number of files in the SharedUpdates directory does not decrease

Fix ID:

Symptom

Solution:

Intermittent ccSvcHst error on shutdown

Fix ID:

Symptom

Solution:

Petrel2008 software doesn't launch when Symantec Endpoint Protection Application & Device Control installed

Fix ID:

Symptom

Solution:

IntelliJ IDEA software does not function with Application and Device Control installed

Fix ID:

Symptom

Solution:

Ping time and CPU utilization increase with Symantec Endpoint Protection MR2 on Vista

Fix ID:

Symptom

Solution:

Symantec Endpoint Protection Manager shows in reports that agent has Network Access Control installed when it does not

Fix ID:

Symptom

Solution:

On Windows 2000 without Terminal Services, users may receive a default profile during logon

Fix ID:

Symptom

Solution:

Sysplant.sys causes application Quintiq to crash

Fix ID:

Symptom

Solution:

Point Patch 1 for Symantec Network Access Control Maintenance Release 2 Maintenance Patch 1
Point Patch 1 is a patch specific to Symantec Network Access Control. It can only be installed over Maintenance Release 2 with Maintenance Patch 1.

Symantec Network Access Control fixes in Point Patch 1

Symantec System Health Agent (SHA) is not running after restart

Fix ID

Symptom:

Solution:

NAP Enforcer: Ignoring "Verify Client UID" does not work

Fix ID:

Symptom:

Solution:

Agent built-in authentication fails when upgrading a Windows XP SP2 computer to Windows XP SP3

Fix ID:

Symptom:

Solution:

NAP Agent does not communicate with Enforcer if "DHCP Enforcement" configured after Symantec Network Access Control Agent started on XP SP3

Fix ID:

Symptom:

Solution:

Maintenance Patch 1 for Maintenance Release 2 (MR2 MP1)
This section describes the fixes in Maintenance Patch 1 for Maintenance Release 2.

About Maintenance Patch 1
This Maintenance Patch cannot be installed over the 11.0.0 or 11.0.1 versions of Symantec Endpoint Protection Manager. It must be installed over Maintenance Release 2. For information about how to obtain the latest build of Symantec Endpoint Protection, read the following document: Obtaining an upgrade or update for Symantec Endpoint Protection 11.x or Symantec Network Access Control 11.x.

Components included in Maintenance Patch 1

Component	Version
AMS	6.12.0.148
Auto-Protect	10.2.4.2/10.2.4.3
Behavior Blocking	3.3.6.7/3.3.6.8
ccEraser	20072.0.1.7
COH	6.1.2.3/6.1.3.20
Common Client	106.3.6.9
DecABI	1.1.1.39
Defutils	3.3.11.0/3.3.16.0
Deuce Engine	2007-06-06-1
ECOM	61.3.0.17
Intelligent Updater	5.0 (Release .006)
LiveUpdate	3.3 (Release .002)
LiveUpdateAdmin	2.1.2 (Release .002)
LiveUpdateCCPA	1.0 (Release .002)
LOTS Manager	3.3 (Release .001)
Microdefs	2.5 (Release .007)
SyKnAppS	2.5.0.12
SymEvent	2.5.3\3
SymNetDrv	7.2.1
Teefer2	11.0.1836.12
WpsHelper	11.0.717.804
VxMS (MSLight)	5.1.1.0

New fixes in Maintenance Patch 1

Symantec Endpoint Protection Manager fixes

Symantec Endpoint Protection Manager fails to update virus definitions or policies to clients

Fix ID:

Symptom:

Solution:

In a replication environment, after a few days, both sites' Symantec Endpoint Protection Manager publishing tasks show exceptions

Fix ID:

Symptom:

Solution:

Newly added site slows down server and console

Fix ID:

Symptom:

Solution:

When the Symantec Endpoint Protection Manager replication data is over 2 GB, replication fails

Fix ID:

Symptom:

Solution:

The unmanaged detector does not reflect the client status correctly

Fix ID:

Symptom:

Solution:

In environments with more than 1,000 groups, updating content takes a long time

Fix ID:

Symptom:

Solution:

Computer Status shows "No Definitions" for clients that do have current definitions

Fix ID:

Symptom:

Solution:

Symantec Endpoint Protection Manager creates 0-byte .DAX files, causing clients to request full definition update

Fix ID:

Symptom:

Solution:

Policy creation failure due to package broken links

Fix ID:

Symptom:

Solution:

Site Properties dialog fails to open

Fix ID:

Symptom:

Solution:

Network Providers in My Network Places has more than one instance of Symantec SNAC Network Provider

Fix ID:

Symptom:

Solution:

Symantec Endpoint Protection client fixes

RTVscan.exe crashes with faulting module msvcr80.dll fault add: 0x000046b4

Fix ID:

Symptom:

Solution:

Normal Users cannot disable firewall, even when allowed to by administrator

Fix ID:

Symptom:

Solution:

A request for a restart is displayed even though no updates are needed

Fix ID:

Symptom:

Solution:

Outlook stops unexpectedly when using "Next Item" button repeatedly

Fix ID:

Symptom:

Solution:

Maintenance Release 2 (MR2)
This section describes the new features and fixes included in Maintenance Release 2 of Symantec Endpoint Protection 11.0 and Symantec Network Access Control 11.0.

About Maintenance Release 2 for Symantec Endpoint Protection and Symantec Network Access Control
Symantec Endpoint Protection 11.0.2 and Symantec Network Access Control 11.0.2 provide enhancements on top of the existing 11.0 functionality to support the Microsoft Windows 2008 Server. In addition to providing compatibility with the new operating system, this release adds compatibility to the Microsoft Network Access Protection (NAP) framework. Fixes for customer problems and minor enhancements since the release of Symantec Endpoint Protection and Symantec Network Access Control are included this release. This release also adds support for Windows Vista Service Pack 1 and XP Service Pack 3.

New features

Support for Microsoft Windows 2008 Server clients
Support for Windows Server 2008 Standard/Enterprise/Datacenter/Web (32-bit or x64 edition), including Server Core installation, has been added to the Symantec Endpoint Protection and Symantec Network Access Control clients. Symantec Endpoint Protection Manager and the deployment tools have also been modified to support the management of Symantec Endpoint Protection and Symantec Network Access Control clients that run on Windows Server 2008. However, the management components cannot be installed on a computer running Windows Server 2008.
Compatibility with Microsoft Network Access Protection (NAP) Framework
Customers can build Symantec Network Access Control-only or multi-vendor policy compliance solutions using Microsoft's Network Access Protection (NAP) technologies. This feature lets customers leverage a standards-based (TNC-compliant) and Microsoft-supported network access control framework. This framework supports 802.1x, DHCP, Microsoft VPN, and IPSec technologies to control network access.

In addition to the previously supported methods, Symantec Network Access Control customers gain the use of IPSec as a compliance method. IPSec is an endpoint-centric method designed to build trust relationships between domain members.

For customers who want to leverage this technology, a major advantage for Symantec Network Access Control is the ability to control all aspects of admission control policy in a single policy console, instead of requiring customers to deploy multiple policy servers and management plug-ins.
Improved resource utilization in Symantec Endpoint Protection client and Symantec Endpoint Protection Manager
The MR2 release reduces the client footprint and resource utilization of the Symantec Endpoint Protection Manager in order to enhance the user experience, especially in small and medium-sized business environments. Administrators have the option to increase the space and memory allocation of the server to fit their business environment.
Enhanced Device Control supports Device ID
This feature lets you set a policy for a specific device that is allowed or not allowed to be attached to the endpoints, which helps ensure that USB memory sticks are not used unless they are approved by your security policy.

Components included in Maintenance Release 2

Component	Version	Comments
Auto-Protect	10.2.3	Certified on Windows 2008
Behavior Blocking	3.3.6\008
ccEraser	20072.0.1.7
COH	6.1.3\020
Common Client	6.3.6\009
DecABI	1.1.1
Defutils	3.3 (Release .002)
Deuce Engine	2007-06-06-1
ECOM	20071.3
Intelligent Updater	5.0 (Release .006)
LiveUpdate	3.3 (Release .002)
LiveUpdateAdmin	2.1.2 (Release .002)
LiveUpdateCCPA	1.0 (Release .002)
LOTS Manager	3.3 (Release .001)
Microdefs	2.5 (Release .007)
SyKnAppS	2.5	Certified on Windows 2008
SymEvent	12.5.3\3
SymNetDrv	7.2.1	Certified on Windows 2008

New fixes in Maintenance Release 2

Symantec Endpoint Protection Manager fixes

Symantec Endpoint Protection embedded database takes too much hard disk space

Fix ID:

Symptom:

Solution:

How to shrink the embedded database using the Dbunload tool

Port leak on Symantec Endpoint Protection Manager

Fix ID:

Symptom:

Solution:

Port Leak in Symantec Endpoint Protection Manager

Fix ID:

Symptom:

Solution:

Localized Symantec Endpoint Protection Manager migration from 11.0.0 to 11.0.1 erases LiveUpdate Inventory

Fix ID:

Symptom:

Solution:

Unexpected exception occurs on Symantec Endpoint Protection Manager

Fix ID:

Symptom:

Solution:

Site replication fails due to deadlocks

Fix ID:

Symptom:

Solution:

Database deadlocks causing multiple problems

Fix ID:

Symptom:

Solution:

Symantec Endpoint Protection Manager user name and password in clear text in registry during LiveUpdate Policy Rolldown

Fix ID:

Symptom:

Solution:

Database sweep does not remove content which is marked for deletion on replication site

Fix ID:

Symptom:

Solution:

Group Folders are not created or take too long to create

Fix ID:

Symptom:

Solution:

Import of policy from one Symantec Endpoint Protection Manager domain to another fails

Fix ID:

Symptom:

Solution:

Agents do not appear in Symantec Endpoint Protection Manager

Fix ID:

Symptom:

Solution:

Agent logs are not being replicated between Symantec Endpoint Protection Managers

Fix ID:

Symptom:

Solution:

AntiVirus logs appear to cause out of memory error that kills Symantec Endpoint Protection Manager

Fix ID:

Symptom:

Solution:

High CPU utilization when Symantec Endpoint Protection Manager builds definitions

Fix ID:

Symptom:

Solution:

AntiVirus and Antispyware policy templates

Fix ID:

Symptom:

Solution:

Symantec Endpoint Protection Manager loses connection with client

Fix ID:

Symptom:

Solution:

Client groups do not function properly

Fix ID:

Symptom:

Solution:

Symantec Endpoint Protection Manager LiveUpdate does not update content after system clock was previously set to a future date

Fix ID:

Symptom:

Solution:

Disaster Recovery procedure conflicts with remote software and is difficult to follow

Fix ID:

Symptom:

Solution:

Procedures to migrate embedded database to remote SQL server causes communication with client to break

Fix ID:

Symptom:

Solution:

Virus Definitions bar chart and IPS Signatures chart on Symantec Endpoint Protection Manager home page do not display

Fix ID:

Symptom:

Solution:

Cannot export agent packages from Symantec Endpoint Protection Manager Web console

Fix ID:

Symptom:

Solution:

ClientRemote Utility not functional

Fix ID:

Symptom:

Solution:

Communication between Symantec Endpoint Protection Manager and client breaks after moving clients to a different Organizational Unit (OU)

Fix ID:

Symptom:

Solution:

Users deleted from Symantec Endpoint Protection Manager groups that are synchronized from Active Directory (AD)

Fix ID:

Symptom:

Solution:

Cannot connect remotely to Symantec Endpoint Protection Manager that is installed behind a firewall with Network Address Translation (NAT)

Fix ID:

Symptom:

Solution:

LiveUpdate downloads are not always randomized

Fix ID:

Symptom:

Solution:

Changing remote console port blocks Symantec Endpoint Protection Manager/Symantec Endpoint Protection communication

Fix ID:

Symptom:

Solution:

Migration – After restoring database after migration, two management servers appear in Symantec Endpoint Protection Manager

Fix ID:

Symptom:

Solution:

Command to cancel scans does not cancel all scans

Fix ID:

Symptom:

Solution:

On Symantec Endpoint Protection Manager Home Page, status of Symantec Endpoint Protection client shows AntiVirus Engine is off

Fix ID:

Symptom:

Solution:

Symantec Endpoint Protection Manager hangs when performing certain operations

Fix ID:

Symptom:

Solution:

Import of certain OU information from LDAP server fails

Fix ID:

Symptom:

Solution:

Windows 2000 Symantec Endpoint Protection clients appear as Unknown Computers in Symantec Endpoint Protection Manager

Fix ID:

Symptom:

Solution:

Some non-shared policies cannot be disabled

Fix ID:

Symptom:

Solution:

Corrupted XML in the Symantec Endpoint Protection Manager database

Fix ID:

Symptom:

Solution:

Cannot log into to Symantec Endpoint Protection Manager after upgrading JRE to 1.6.x

Fix ID:

Symptom:

Solution:

Need error handling when multiple attempts of clients to download LiveUpdate content from server fail

Fix ID:

Symptom:

Solution:

Devices may not work when Extreme switch is used in network environment

Fix ID:

Symptom:

Solution:

Home and Monitors tabs don't work correctly if TEMP and TMP environment variables point to different folders

Fix ID:

Symptom:

Solution:

Online status of administrators always shows Offline

Fix ID:

Symptom:

Solution:

Need to apply limits to all events to ensure hard disk does not get filled up

Fix ID:

Symptom:

Solution:

Centralized Exceptions does not function in exceptional situations

Fix ID:

Symptom:

Solution:

Symantec Endpoint Protection Manager Process Event Log entries populated on Windows SBS Server

Fix ID:

Symptom:

Solution:

Cancelling "Add Package" operation causes unexpected error message and/or system hang

Fix ID:

Symptom:

Solution:

Symantec Endpoint Protection client cannot be added to specified group if group name contains spaces

Fix ID:

Symptom:

Solution:

Cannot save report "Attacks Over Time"

Fix ID:

Symptom:

Solution:

Cannot configure "Check Floppies for Boot Viruses" from the Symantec Endpoint Protection Manager

Fix ID:

Symptom:

Solution:

Maximum size of incoming log queues is too large (256GB)

Fix ID:

Symptom:

Solution:

Server GUI changes after clients send "User Information Collection"

Fix ID:

Symptom:

Solution:

LiveUpdate Help button unresponsive

Fix ID:

Symptom:

Solution:

Non-translated character strings on Report pages

Fix ID:

Symptom:

Solution:

Incorrect Help information and links from Symantec Endpoint Protection Manager

Fix ID:

Symptom:

Solution:

Computer Name with Chinese characters displays incorrectly

Fix ID:

Symptom:

Solution:

Reports generated in Chinese .MHT format display a blank page when opened with Internet Explorer

Fix ID:

Symptom:

Solution:

User cannot separate port numbers with spaces from Remote and Local Ports drop-down list

Fix ID:

Symptom:

Solution:

Garbage characters in Server Reporter panel

Fix ID:

Symptom:

Solution:

Truscan log column truncated

Fix ID:

Symptom:

Solution:

Incorrect font displayed on Symantec Endpoint Protection Manager Admin page

Fix ID:

Symptom:

Solution:

Symantec Endpoint Protection client fixes

TMP folders in virus definitions folder eventually consume all available drive space

Fix ID:

Symptom:

Solution:

Symantec Endpoint Protection Outlook Plug-in breaks all Outlook attachments

Fix ID:

Symptom:

Solution:

Symantec Endpoint Protection client scans do not scan any or all files

Fix ID:

Symptom:

Solution:

Windows blue screen error

Fix ID:

Symptom:

Solution:

64-Bit Windows 2003 Server blue screen error

Fix ID:

Symptom:

Solution:

Symantec Endpoint Protection client maintains accelerated heartbeat for too long

Fix ID:

Symptom:

Solution:

Symantec Endpoint Protection client migration problems

Fix ID:

Symptom:

Solution:

Update Schedule for Symantec Endpoint Protection client is not updated

Fix ID:

Symptom:

Solution:

Installing Application Control without Proactive Threat Scan blocks nothing

Fix ID:

Symptom:

Solution:

With Sysplan enabled, SMC.exe crashes after Windows login

Fix ID:

Symptom:

Solution:

Symantec Endpoint Protection client GUI crashes when importing rules to an unmanaged Symantec Endpoint Protection client

Fix ID:

Symptom:

Solution:

Migration from SPA 5.1 to Symantec Endpoint Protection 11.0 causes firewall to fail to load

Fix ID:

Symptom:

Solution:

Failed migration from 10.1 MR7 to 11.0 MR1 on French Operating Systems

Fix ID:

Symptom:

Solution:

System crashes when application/device control is installed

Fix ID:

Symptom:

Solution:

Symantec Endpoint Protection client does not scan files with certain special characters

Fix ID:

Symptom:

Solution:

Legacy scheduled scans run on client after migration to Symantec Endpoint Protection, but cannot be viewed or modified from the Symantec Endpoint Protection Manager

Fix ID:

Symptom:

Major Components
Symantec Endpoint Protection	11.0.3001.2224
Client Management Component	11.0.3001.2224
Symantec Network Access Control	11.0.3001.155
Symantec Endpoint Protection Manager	11.0.3001.2224

Minor Components
Auto-Protect	10.2.6.5
Behavior Blocking	3.3.7.004
COH	6.1.6.3
Common Client	6.3.7.009
DecABI	1.1.1.39
Defutils	3.3.20.0
QServer	3.6.16
SyKnAppS	2.5.0.12
SymEvent	12.5.3.3
SymNetDrv	7.2.3.302
WpsHelper	11.0.717.804