Unmanaged SEP client continues to send Insight lookups to EDR and attempts to complete stuck global sandbox file submission

Products

• Endpoint Detection and Response

Issue/Introduction

After un-managing a Symantec Endpoint Protection (SEP) client with SEP Manager, the un-managed SEP client continues to send file Insight lookups to EDR and attempts to complete stuck global sandbox file submission. All other manual sandbox submissions are in started state.

Resolution

Please upgrade to EDR 4.4, where EDR removes the file submission command for the global sandbox from the queue to permit subsequent commands to be processed.