Symantec Endpoint Proctection 12

[Biker]

We have just installed Symantec Endpoint Proctection 12.1.671.4971 on our network and have noticed that the Traffic Log under Network Threat Protection is filling up on each workstation, example below.

 

26/08/2011 8:33:05 AM Blocked 15 Outgoing ETHERNET [type=0x806] 172.16.0.123 00-0F-20-30-EF-08 0 172.16.4.86 00-16-17-63-49-AA 0 steve OLD_PALACE Default 1 26/08/2011 8:32:54 AM 26/08/2011 8:32:54 AM Block all other traffic

 

Can anyone tell me what this is and how we can stop it.

 

Thanks

 

Steve

[SYNACK]

Looks like it might be blocking ARP traffic due to an outdated or corrupted policy from SEP11

 

ETHERNET [type=0x806] | Symantec Connect Community

[Biker]

Thanks Synack for your reply. I'll give that a go and get back to you.