Symantec Endpoint Protection blocks this application: nwlnkipx.sys 1

[moviewatch]

On XP Home, every 10 minutes Symantec Endpoint Protection sounds a beep and popups the message, "Traffic has been blocked from this application: nwlnkipx.sys". I would appreciate it if someone could explain how to stop this nuisance.

When this occurs, I find that the Symantec Endpoint Protection Network Threat Protection Logs usually has 4 identical entries having following information:

Blocked 10 Outgoing ETHERNET [type=0x54] 0.0.0.0 FF-FF-FF-FF-FF-FF ... 84 C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys ... Block_all

Thanks.

 

[goombawaho]

It's for clients to connect to netware networks. If you don't have that situation, remove it from the IP stack.

The following copied from:

http://forum.soft32.com/windows/stop-device-drivers-loaded-ftopict346616.html

You have "Client Service for Netware" or this machine has been connected to a Netware server, try to remove/uninstall this service from your Network by doing this:
1- Click Start >> Control Panel >> Double click Network and Internet Connections >> double click Network connections then right click your LAN and select properties then under general look for Client service for Netware, highlight it then click Remove, click [OK] and reboot your machine, does this help?.
Client Service for Netware:

http://www.microsoft.com/technet/prodtechnol/Windows2000Pro/reskit/par...proch24

 

[BadBigBen]

If you do not need NETBios or IPX:

Disable NetBIOS in W2K/XP/2003

http://www.petri.co.il/disable_netbios_in_w2k_xp_2003.htm

if you need IPX/NETBios:

How to add a rule using the"Add Firewall Rule Wizard"

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008060208101648

or look for the RULE that blocks IPX/NETBios and then delete that rule...



Ben
"If it works don't fix it! If it doesn't use a sledgehammer..."
How to ask a question, when posting them to a professional forum.
Only ask questions with yes/no answers if you want "yes" or "no"

 

[moviewatch]

Thanks for your tips! In the LAN Properties, I saw NWLink NetBIOS, and NWLink IPX/SPX/NetBIOS Compatible Transport Protocol. Although the Uninstall was desensitized for these two items, I unchecked them both. Afer rebooting, the periodic message and beep went away. I appreciate your assistance.

 

[moviewatch]

Hi goombawaho,
I did not see "Client service for Netware" or "Client Service for Netware". But I appreciate your effort.

Hi BadBigBen,
OK, after "fixing" the problem using your reference to "NetBIOS", I read the link more carefully, and found the disable NetBIOS over TCP/IP. Thanks again!

 

[BadBigBen]

Glad that it worked, and thanks for posting back...



Ben
"If it works don't fix it! If it doesn't use a sledgehammer..."
How to ask a question, when posting them to a professional forum.
Only ask questions with yes/no answers if you want "yes" or "no"