[stewie6666]

Hi,

Using a Z10 updated to official OS10.1 with BB Link (1.1.0.37). Wireless Sync only works if the Symantec Endpoint Protection (12.1.110.1.401) is disabled. My question is, does anyone know how to configure the Symantec software so it allows my Z10 to show up in Link?

TIA

[rthonpm]

I haven't used SEP in a long time, but I think you have the ability to add trusted applications, or hosts, through the programme.

[stewie6666]

Thanks rthonpm. Would you happen to know what applications and/or hosts I would have to add?

[sklotz2000]

SEP 12.1 is the Enterprise version. Are you attempting to do this at your office? And if so, are you the LAN Admin?

[stewie6666]

Hi sklotz2000. It is the Enterprise version, but it is installed "unmanaged", so I'm able to change settings.

[sklotz2000]

Sorry I didn't respond sooner -I've been stuck in meetings all afternoon. Damn work... I hate it when it interferes with my day!
I'll try to dig into this tomorrow for you when I'm back at my desk. Unfortunately I'm on Verizon so I'm not on 10.1 yet and haven't had the opportunity to do the SEP configuration. My clients are all on 12.1RU2, so I should be able to provide the steps needed.
Assuming you are running Windows 7, have you tried excluding the "ProgramData\Research in Motion" folder from SONAR scans? This would be the easiest approach since it appears that's where the Link Tunnel Manager is located.

[stewie6666]

Thanks sklotz2000, but no need to apologize. I appreciate the help. Yes, I'm running Windows7 (64). I tried the SONAR exclusion, but it didn't help.
If I uncheck the Enable Firewall box under Network Threat Protection Settings, click OK, the Z10 tab shows up in BB Link in 10-15 seconds.
Thanks again for your help!

[Savade Chetan]

Hi,

I am Chetan Savade from Symantec Technical Support Team.

Can you attach the SEP NTP traffic logs? If SEP is detecting as a threat then can create a security risk exception.

How to add a Security Risk Exception on an unmanaged Symantec Endpoint Protection Client
http://www.symantec.com/docs/TECH105721

Regards,
Chetan

[sklotz2000]

Thank you for stepping in to help Chetan. Now that I am back in the office, I was just doing some more research to help answer stewie6666's question.

stewie6666, By default, the SEP installation has NTP logging turned off, so you may need to temporarily enable logging so you can capture the data needed. Instead of using the log file, you can also look at the Network Activity Monitor (Status Screen>NTP>Options>View Network Activity) to see what it's blocking. To see what particular file is being blocked (and the path), you will need to enable "Application Details" from the "View" drop-down menu on the Network Activity screen.

Once you have the file name needed, the link Chetan provided should then step you thru creating the exception rule.

[dracolnyte]

What I found was if you want to access your files on your computer, then add the specific folder into the allowed list

Posted via CB10

[stewie6666]

I found if I turn off the Firewall Rule "Block IPv6 (Ethernet type 0x86dd)", that both BB Link and remote file access function as they're meant to.
Why would this rule be blocking the Z10's access?
Thanks again.

[sklotz2000]

I've read that OS 10.1 now includes an on/off setting for IPv6. You might try disabling it there to see if it has any effect.

[stewie6666]

Thanks sklotz2000, that is correct, but all of my saved wifi settings have the IPv6 off (must be by default, as I didn't change it).

[sklotz2000]

Interesting...
I wish I could test this myself. I'm expecting this same issue once I go to 10.1.

Posted via my Bad A$$ Z10

[vandenhooff]

Thanks sklotz2000, that is correct, but all of my saved wifi settings have the IPv6 off (must be by default, as I didn't change it).

I've read through most if not all of the threads/entries on Crackberry on this issue; I own a Z10 and use Symantec Endpoint at the office and McAfee at home. What do you mean by "all of my saved wifi settings have the IPv6 off" where are these settings - on the phone or in your Internet security program?

I've changed numerous settings in both my Internet Security programs and the only time RFA works is when I completely disable the firewall - something I am not comfortable doing for any length of time. When the firewall is not disabled both PCs are listed but I don't see any of my folders, just a blank screen.

I've added folders, as suggested.
I've disabled IPv6, as suggested
I've deleted, re-installed Blackberry link, as suggested.

Very frustrating - hoping someone (or me) finds and posts the solution soon.

[stewie6666]

Hi vandenhooff,

In the phone under saved wifi, tap a saved wifi location, and you'll see all the options for that wifi name. On this screen is an on/off option for "Enable IPv6".

In SEP, there's a firewall rule called "Block IPv6 (Ethernet type 0x86dd). I found if I deselect this rule, the BlackBerry Link works over wifi, and I can access my files remotely, without any issue. As soon as I turn the rule back on, Z10 wifi to Link and remote files is broken.

Hope that helps.

[vandenhooff]

Thanks Stewiie6666, with your instructions I found the wifi settings screen. IPv6 was already disabled. I enabled it (what the heck, I had nothing to lose) and tried again. Same result: Z10 sees the PC but no folders are available. So I went back and disabled the wifi IPv6 setting.

Yesterday on my notebook I opened SEP and deleted the IPv6 setting. Same result: Z10 sees the laptop but no folders are shown.

grrr....

[sklotz2000]

stewie6666 or vandenhooff,
Have you checked to see specifically what the SEP firewall is blocking? The steps to do this are outlined above in previous posts from myself and from Savade Chetan. If we can determine what it's blocking, then an exception can easily be created in SEP.

[vandenhooff]

Sklotz2000, been there, done that ,but thanks for trying.

[Chanthone]

I just read through the whole thread because I was having the same problem. And only when I turned off firewall on SEP I could access files on my PC

Posted via CB10

[Rock077]

I have exceptionally low Wifi strength. My iTouch picks up my home router where my Q10 does not. I also experience dropping of the Wifi connection often and I have to disconnect and reconnect even tho it says it is connected...starting to thing I need to return this thing.

Posted via CB10

[vandenhooff]

Today I created a rule in SEP to ALLOW Ethernet IPv6 (0x86dd) traffic. The results were the same: my Z10 sees the laptop but no folders are shown.

What's interesting is the SEP log clearly shows it is blocking IPv6 traffic. Why, I've allowed it? There has to be another setting in SEP (or Windows7) that we've overlooked.

[vandenhooff]

Finally, it works. This is what I did,
Open Symantec Endpoint Protection
Beside Network Threat Protection click Options, and Click Configure Firewall Rules


Once the window below opens, click the Add button (lower left corner)


Give the Rule a name - I used IPv6 (0x86dd)
Set your options as I have in the picture below


Click the Hosts tab and Apply this rule to: All hosts

Click the Ports and Protocols tab
In the first drop down (Protocol) choose Ethernet
In the second drop down (Ethernet Type) choose IPv6 (0x86dd)
Just like in the picture below


Applications tab, while there may be applications listed do not check any of them; leave the boxes unchecked
Scheduling tab - I never touched anything

Click ok
Click ok
X-out of SEP
...and now, it just might work for you too!

[sklotz2000]

Awesome!! Thank you vandenhooff!! Now I just need to wait for my 10.1 update.

[carbon98accord]

Thanks! The rule needs to be the first rule on the list of rules as well.