Symantec protection blocking NOSKRNL.EXE

[Sheikh Jabed Hasan]

Recently i have found that, my Symantec endpoint protection antivirus blocking NOSKRNL.EXE and that is why its also blocking the all incoming request.

Please let me help/guide where i need to change in the SEPM policy.

please also find attached log

Attachment(s)

Symantec protection blocking NOSKRNL.log   261 KB 1 version

[Charbel Trainer]

Hi Sheikh,

SEP is not blocking executable ntoskrnl.exe, it's blocking the network traffic directed to this executable. 

If you wish to change this behaviour find the relevant firewall policy and edit "Block Web Service Requests" rule for the client.