Network transfer speeds decrease after installing Symantec Endpoint Protection
search cancel

Network transfer speeds decrease after installing Symantec Endpoint Protection

book

Article ID: 157551

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

When Symantec Endpoint Protection (SEP) installed on a Windows computer, network traffic throughput can decrease significantly. If SEP's Firewall component is uninstalled, the issue no longer occurs.

Cause

Performance degradation when processing occurs in user mode space.

Resolution

This issued has been fixed in Symantec Endpoint Protection which introduces a "kernel mode" caching mechanism to improve performance. 

In order for the fix to work, the following "user mode" features of SEP must be disabled to prevent the traffic from entering the "user mode space".

  1. In the SEPM console, browse under Policies > Firewall > Edit the applicable Firewall policy > Click on Protection and Stealth under "Windows Settings".
  2. Uncheck the options for:
    • Enable denial of service detection
    • Enable Stealth mode Web browsing
    • Enable TCP resequencing
    • Enable OS fingerprint masquerading
  3. On the left side, click on Peer-to-peer Authentication Settings.
  4. Uncheck the option "Enable peer-to-peer authentication.
  5. Click Ok to save the changes.

In addition, the fix will not work if on any firewall rule you have enabled packet logging or if you have custom signatures enabled for IPS. 

The fix supports Windows Vista and later platforms.