Endpoint Protection

 View Only
  • 1.  Symantec protection blocking NOSKRNL.EXE

    Posted May 02, 2024 12:02 PM
      |   view attached

    Recently i have found that, my Symantec endpoint protection antivirus blocking NOSKRNL.EXE and that is why its also blocking the all incoming request.

    Please let me help/guide where i need to change in the SEPM policy.

    please also find attached log


  • 2.  RE: Symantec protection blocking NOSKRNL.EXE

    Broadcom Employee
    Posted 15 days ago

    Hi Sheikh,

    SEP is not blocking executable ntoskrnl.exe, it's blocking the network traffic directed to this executable. 

    If you wish to change this behaviour find the relevant firewall policy and edit "Block Web Service Requests" rule for the client.