Update to 1.6.2 (1434) fire Symantec Endpoint Protection

Got a problem with Viscosity or need help? Ask here!

shane54

Posts: 1
Joined: Thu Mar 17, 2016 10:16 pm

Post by shane54 » Thu Mar 17, 2016 10:52 pm
Hi, today I receive update to my Viscosity VPN Client (1.6.2 / 1434) - and it's service C:\Program Files\Viscosity\ViscosityService.exe was killed (blocked and quarantined) by SEP - Symantec Endpoint Protection. Reason - Heuristic Virus, bla-bla, and link to their Knowledge Base: http://securityresponse.symantec.com/se ... &vid=42293

Do you have some policy, how you work with antivirus vendors? Do you inform them somehow about new versions, when you release them? As VPN client is operating on the "level" (network adapters, protocols etc.), which is very importnat and "suspicious" for antiviruses and they definitely promptly monitor everything what happened on that level on each PC.

So, now my VPN is not working at all - until Symantec will update their databases and my SEP client will download them. I can downgrade of course to the previous, correctly working version of Viscosity.

My post is more FYI, as I do not believe that you will do something.


Rostislav

Eric

User avatar
Posts: 1146
Joined: Sun Jan 03, 2010 3:27 am

Post by Eric » Fri Mar 18, 2016 10:55 am
Hi Rostislav,

You can report the false positive detection to Norton/Symantec:
https://submit.symantec.com/false_positive/

Most AntiVirus packages also allow you to whitelist software, in this case Viscosity, to prevent it from being falsely flagged. You'll need to review your AntiVirus software's documentation, or get in touch with their support staff, for more information on how to do this.

Regards,
Eric
Eric Thorpe
Viscosity Developer

Web: http://www.sparklabs.com
Support: http://www.sparklabs.com/support
Twitter: http://twitter.com/sparklabs
2 posts Page 1 of 1