Hello everyone!
We recently installed Symantec Endpoint Protection on one of PCs.
After installation, SEP started to block traffic from my domain controller and file server, as it's showed on screenshot. The tip says:
"Client will block traffic from IP 192.168.0.2 for next 600 seconds.
Attack of port scanning type has been detected."
After this message, PC is unable to use file share placed on this server.
All other PCs, which have other antivirus software, don't show this message and successfully connect to the server. I also haven't found any viruses on the domain controller.
What I have tried:
I added IP 192.168.0.2 as allowed host in Firewall, but it didn't help.
I also tried to deselect the tick "Detect port scanning" on tab "Intrusion Prevention" of Network AV parameters, but it didn't help.
Please say us how to allow IP 192.168.0.2 and get rid of the traffic block?