Dear friends, we are running Symantec Endpoint Protection 12.1 on Windows Server 2008 R2 File Server but, randomly, the network shares hangs and the network applications stop responding.
The current configuration is:
- Symantec Endpoint Protection
- Enabled Features: File System Antivirus only
- Version: 12.1.4100.4126
- Exceptions: Correctly defined to exclude important folders, files and processes from any kind of scan
- Scan: Only modified files are being scanned
- Windows Server 2008 R2 x64 with Service Pack 1
- Hyper-V Enabled
- File Server Resource Management is Enabled
- Symantec Endpoint Protection Manager is Installed (ASA database is defragmented)
- Server: IBM System x3550 M4
- 32GB RAM
- 2 Processors
- RAID Volumes: RAID 1 - Operating System, RAID 5 - User Files, RAID 1 - Virtual Machines (all disks are 6Gbps SAS)
Beside the slow access to the network shares, when the server is restarted the server stucks during shut down. A hard shutdown is needed.
When Symantec Endpoint Protection is removed from server, the problem does not happen.
Right now, after a reboot on last saturday - 14th june, 2014 -, the server is fully functional and I'm waiting for the problem to happen again to try to use Process Monitor capture server activity and confirm that the problem is being caused by SEP (http://blogs.technet.com/b/markrussinovich/archive...). I also enabled VPDebug Logging (http://www.symantec.com/business/support/index?pag...) to check if SEP shows some sort of error message on it's working log.
Any help will be appreciated.
Best regards to everyone!