Something i recently found and wondering if anyone else had the same issue and a better resolution then me .
Been seeing some weird issues with LANDesk Client and Symantec Endpoint Protection installed on a Windows 7 32bit PC
when viewing the Syamantec Firewall logs i noticed that my ip address of the Client machine that has symantec installed is appearing in the remote Host Section and thus a server appearing in the Local Host of the logs
which causes my Symantec logs to log everything as being blocked cause it is unable to match any rules to the traffic.
This leaves me with the obviouse lack of confidance in the logs that i see and the firewall working as expected since even though the logs are saying blocked i see no lack of function on the PC
Obviously call logged to Syamntec and they have not been able to find a resolution to the problem to date .
A Colleague was having an simular issue with Wireshark
after a bit of testing i was able get it down to the LANDESK XDD client causing the issue when i install LANDesk without the XDD and Symantec Endpoint protect everything works fine
a slap on the wrist for me cause i did have every machine installed with XDD so i have a nice long task of pushing out a updated client without the XDD as from what i understand XDD is only used for finding unmanaged clients behind a firewall
I guess just wondering if anyone else has had a simular issue