DNS requests are sent to sp.cwfservice.net even though IPS URL Reputation is disabled

book

Article ID: 210337

calendar_today

Updated On:

Products

Endpoint Protection Endpoint Security

Issue/Introduction

When IPS URL Reputation is disabled, the SEP (Symantec Endpoint Protection) or SES (Symantec Endpoint Security) client still generates a lot of DNS requests for sp.cwfservice.net.

Cause

The feature shares a setting with Insight in the external communications configuration.

Repeat requests are due to lookup failures if the lookup is blocked.

Resolution

Our Engineering team is investigating this issue and will update this document when a solution becomes available.

Additional Information

Allowing the requests instead of blocking them should prevent excessive retries.

ESCRT-5966