ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

ccSvcHst crashes and network connectivity is disrupted upon system resume with WSS Traffic Redirection enabled.

book

Article ID: 173370

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

Symantec Endpoint Protection's (SEP) ccSvcHst process crashes on systems that resume from a hibernation/sleep state when they have WSS Traffic Integration (WTR) configured and enabled. In some instances, this results in multiple SEP client shield icons and may disrupt network connectivity.

Event Logs show Application Errors for ccSvcHst.exe on the ntdll and IPSEng DLLs:

Application Error 1000 "Faulting application name: ccSvcHst.exe,
version: 13.4.0.20, time stamp: 0x5b5a79c7
Faulting module name: ntdll.dll, version: 10.0.16299.785, time stamp: 0xe9b724ac
Exception code: 0xc0000005
Fault offset: 0x000380f0
Faulting process id: 0x42bc
Faulting application start time: 0x01d4890855b12cf4
Faulting application path: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.1023.0100.105\Bin\ccSvcHst.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: 33c3a87a-1e8f-4c3c-9dee-19394f9c3088
Faulting package full name: 
Faulting package-relative application ID:"

 

Application Error 1000 "Faulting application name: ccSvcHst.exe,
version: 13.4.0.20, time stamp: 0x5b5a79c7
Faulting module name: IPSEng32.dll, version: 16.2.1.22, time stamp: 0x5b594136
Exception code: 0xc0000005
Fault offset: 0x0003d893
Faulting process id: 0x1d74
Faulting application start time: 0x01d488f371022034
Faulting application path: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.1023.0100.105\Bin\ccSvcHst.exe
Faulting module path: C:\ProgramData\Symantec\Symantec Endpoint Protection\14.2.1023.0100.105\Data\Definitions\IPSDefs\20181129.061\IPSEng32.dll
Report Id: 12953700-2ce6-458c-a481-81b4afdc70c3
Faulting package full name: 
Faulting package-relative application ID:"

Environment

Microsoft Windows

Resolution

This problem is fixed in WTR engine content 1.1.0.272.