Unmanaged SEP client continues to send Insight lookups to EDR and attempts to complete stuck global sandbox file submission
book
Article ID: 192184
calendar_today
Updated On:
Products
Endpoint Detection and Response
Issue/Introduction
After un-managing a Symantec Endpoint Protection (SEP) client with SEP Manager, the un-managed SEP client continues to send file Insight lookups to EDR and attempts to complete stuck global sandbox file submission. All other manual sandbox submissions are in started state.
Resolution
Please upgrade to EDR 4.4, where EDR removes the file submission command for the global sandbox from the queue to permit subsequent commands to be processed.