Hi,
Yesterday I started having an issue with the "Symantec Endpoint Protection Webserver" Service on my Endpoint Server, running windows server 2003. After completing a database backup, the Server just slowed to a crawl, none of my clients could connect, the endpoint manager web page was no longer working, I couldn't log into the manager from the server. Our network team noticed some odd traffic on the network coming from our symantec server and that the ping response we were getting from the symantec server was showing the following (I removed our ip address and domain info):
Pinging symantec [000.00.0.000] with 32 bytes of data:
Reply from 000.00.0.000: bytes=32 time=1109ms TTL=128
Reply from 000.00.0.000: bytes=32 time=534ms TTL=128
Reply from 000.00.0.000: bytes=32 time=562ms TTL=128
Reply from 000.00.0.000: bytes=32 time=462ms TTL=128
We decided to stop some services and see if that helped at all. After some trial and error we were able to narrow down the problem to the "Symantec Endpoint Protection Webserver" service. With that service disabled the ping time returned to <1ms which is what we would expect to see from it.
Since this database back up was in preperation of setting up a new Windows 2012r2 server we kicked our efforts on that migration into high gear, but we are still corious as to why this started happening. Any insight would be awesome.