Endpoint Protection agent tries to access to metadata.google.internal, 169.254.169.254 and 192.0.0.192 IPs

Products

• Endpoint Security
• Endpoint Security Complete

Issue/Introduction

Symantec Endpoint Protection/Security (SEP/SES) agent tries to access to metadata.google.internal, 169.254.169.254 and 192.0.0.192.

Resolution

This behavior is by design. It tries to get instance ID information of some cloud infrastructure, such as Google Cloud Platform, AWS and Oracle Cloud Infrastructure. The PCH module of the agent does the lookups to see if it's running on a cloud service VM or not. 

PCH module is active on both hybrid as well as cloud-managed clients.

There is no option to disable these activities.