Finding devices on network blocked by symantec firewall

Hi

Simatic manager ( finding nodes ) ,primary setup tool and TIA portal are all blocked when trying to search/find PLC's,switches and other siemens devices.

It's the symantec firewall function that blocks some siemens software ( EXE or DLL ) from doing a broadcast on dedicated MAC adresses (or   blocking the reply)

This subject has come up a few times in this forum but never with an acceptable solution.

The proposed solution is allways : Disable the firewall.

But this is a no-no . IT will come down on me like a ton of bricks.It not good policy in anycase .

What I need to know is which rule must be added to the exception list in SEP ?

Eric

Hello,

sry don't use Symantec SW, but there can be system of set-up allert if incoming/outcoming connection will arrived. In this situation is only needed to set, that this situation is ok/safely for system, Symantec probably can archive this settings and never allert this again. This is only standard solution, maybe in most products. You don't have power over that Symantec settings??? You are'nt Admin in your PG/PC?

Hi

No , I cannot change the settings in Symantec and our IT support team needs some specific information to add an exception .

Eric

Hello,

which version of Symantec you use exactly?
And which Symantec Product suite ?

Regards

Christoph

Hello,

then probably can be solution to look at your PC Firewall rules/settings and give to IT all Siemens settings (EXE, DLL, maybe program restrictions), there can be aditional settings via Properties to program (some port to open,...). Give them this. Another solution (but for experienced users) can be at PC->Management. There are also all needed rules. I think about this, because after install Siemens SW all this rules are standartly added to Windows Firewall rules, prior to install produkts. Give info how it close...

ChristophD

which version of Symantec you use exactly?
And which Symantec Product suite ?

 Uisng SEP 12

Duris_I

then probably can be solution to look at your PC Firewall rules/settings and give to IT all Siemens settings (EXE, DLL, maybe program restrictions), there can be aditional settings via Properties to program (some port to open,...). Give them this. Another solution (but for experienced users) can be at PC->Management. There are also all needed rules. I think about this, because after install Siemens SW all this rules are standartly added to Windows Firewall rules, prior to install produkts. Give info how it close...

Hi

I sent the file/log from siemens security settings to our IT .IT added the exceptions according to the file but I still cannot access devices.

If I temporary switch off the SEP firewall and enable the windows firewall it works .This info was also sent to our beloved system admins ....

But up to now still no specific rule has been 'found'

heh beloved IT LOL

ok thnx for info, I expect this because same problem I had with NOD Security, but there was system that acts like 'learning', perfectly work. Nevermind now comes other help - Google, there must be help how filter some MACs due your SW Symantec version, this is probably final step, give info and greeting to that beloved ITs...

hi,

SEP has a function called "Network Protect" that does not allow the MAC-Adress-broadcast that is used to find accessable nodes.

Try to deactivate this function. 

hope this helps,

regards,

I cannot find this option "Network protect".

We use SEP V12.1.6 (12.1 RU6 MP6) build 7061.