Ken, That was my first question, but it is still unanswered. I am still new at this %dayjob%.
In this case, the testing would have had to be done in a separate network, which I am fairly sure we don't have. I will take that suggestion to the table when we analyze the breakdowns of this incident. Robert On Wed, Nov 7, 2012 at 9:37 PM, Ken Schaefer <[email protected]> wrote: > No matter who you migrate to, you’ll also run into issues (false > positives seem to occur all the time, with all vendors).**** > > ** ** > > Did you test the patches before releasing to Production? Might be worth > beefing up the testing regime.**** > > ** ** > > *From:* Robert Cato [mailto:[email protected]] > *Sent:* Thursday, 8 November 2012 5:22 AM > *To:* NT System Admin Issues > *Subject:* Symantec %@(*&OI:TNGF(P***** > > ** ** > > **** > > FYI**** > > **** > > We approved two MS patches yesterday (KB2574819 KB2592687) in WSUS. One > user installed the two updates in the afternoon and Symantec Endpoint > Protection 12 with several advanced features enabled (threat protection, > hurestics, SONAR, etc). SEP quarrantined 15 system files, run32.dll among > them. The real problems started when SEP decided to quarantine the files > across all ~600 workstations taking us completely offline.**** > > **** > > The fix was to boot each workstation into safe mode and removing SEP.**** > > **** > > It was a long night.**** > > **** > > The good news:**** > > None of the advanced features were enabled on the servers.**** > > We are migrating away from SEP as of this morning.**** > > **** > > Robert**** > > ** ** > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
