System lockdown for SEP does not block applications specified in a SHA-256 file fingerprint list after a 14.3 RU4 client is upgraded to 14.3 RU5

Products

• Endpoint Protection

Issue/Introduction

When you upgrade a Symantec Endpoint Protection (SEP) 14.3 RU4 client to 14.3 RU5 and import a file fingerprint list that uses SHA-256 fingerprints, system lockdown list does not correctly block applications. 

Cause

This issue is caused because the client uses an earlier version of the sysfer and sysplant services. Application Control uses the sysfer and sysplant services.

Resolution

To work around this issue, you must restart the 14.3 RU5 client after you upgrade from 14.3 RU4. [SEP-79993]