Symantec Endpoint Protection 12.1 Internet Email Auto-Protect prevents Symantec Endpoint Protection Manager from sending email

Products

• Endpoint Protection

Issue/Introduction

When the Symantec Endpoint Protection 12.1 (SEP) feature Internet Email Auto-Protect is installed on the same computer as the Symantec Endpoint Protection Manager (SEPM), it can sometimes prevent the SEPM from sending email.

 

This issue only occurs on desktop class operating systems, such as Windows Vista, Windows 7, Windows 8, or Windows 8.1.

If SEPM mail debugging is enabled (see TECH102413 for steps), the following error can be seen in %temp%\scm-ui-*.err after a failed test email:

com.sygate.scm.util.mail.EmailException: javax.mail.MessagingException: Could not connect to SMTP host: 192.168.1.11, port: 25;  nested exception is:  java.net.SocketException: Network is unreachable: connect

Also reported in ...Manager\tomcat\logs\catalina.err, SecurityAlertNotifyTask-0.log (Notification emails), or ScheduledReportingTask-0.log (Scheduled reports).

Resolution

This problem is fixed in Symantec Endpoint Protection 12.1 Release Update 5 (SEP 12.1.5). For information on how to obtain the latest build of Symantec Endpoint Protection, read Obtaining the latest version of Symantec Endpoint Protection or Symantec Network Access Control.

 

Workaround

This issue may be worked around on older versions using one of the following methods:

1. Uninstall the Internet Email Auto-Protect component from SEP
2. Modifying SEP's Internet Email Auto-Protect policy so that it no longer expects outbound mail on port 25

How to uninstall the Internet Email Auto-Protect component:

1. Click Start
2. Type in: appwiz.cpl
3. Press Enter on the keyboard
4. Right-click Symantec Endpoint Protection
5. Click Modify or Change
6. Click Next
7. Click the radio button Modify
8. Click Next
9. Expand Virus, Spyware, and Basic Download Protection
10. Click Internet Email Auto-Protect
11. Click Entire feature will be unavailable
12. Click Next > Click Next > Click Next
13. Click Install
14. Click Finish
15. When the installation completes, reboot the computer

How to modify the SEP Internet Email Auto-Protect outbound port:

Note: It is recommended that you only make the following policy change for the Symantec Endpoint Protection Manager computer.

1. Login to the SEPM
2. Click Policies
3. Click Virus and Spyware Protection
4. Right-click the policy > Click Edit
5. Click Internet Email Auto-Protect
6. Click Advanced
7. Change the value in Outgoing mail server port (SMTP) to an unused port
8. Click OK