Network Intrusion Prevention appears to be disabled after a restart on Windows Embedded
Last Updated October 08, 2015
After you install and restart the Symantec Endpoint Protection (SEP) client on a Windows Embedded-based device, you see a notification that indicates that intrusion prevention is restored. The Symantec Endpoint Protection System log indicates that the network intrusion prevention driver failed to load, but then was restored and fully enabled. You want to know if you need to take any further action.
System log indicates the following:
Network Intrusion Prevention is not protecting machine because its driver was unloaded.
About a second later, however, another message appears:
Network Intrusion Prevention has been restored and enabled.
This event occurs on a device where the file-based write filter (FBWF) is enabled and on which you did not immediately run LiveUpdate.
When this event occurs, there is no further action you need to take.
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe