This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(307.2, 45%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETG%3C/text%3E%3C/svg%3E)
Hi,
On server has Symantec antivirus installed and a console of an RPA application (AAE). To install MDE, first we proceed with uninstallation of Symantec AV, to later install the MDE antivirus. Once MDE is installed, we proceed to restart the server. At the time of validating the RPA application, it is identified that the RPA clients lose communication with the RPA console since the screen does not appear.
Files names and paths suggested by the vendor have already been added to the MDE exception list, on RPA clients and server, but the problem has not been resolved, because this issue has a couple of months trying..
We need to know how to resolve this issue, or if necessary if we can have a liability waiver to keep Symantec AV installed on this server.
We have been trying for several months different actions such as adding some exception rules in the AV MDE without success.
Can you help us please to know what’s happening?.
Can you provide more information on RPA? What is RPA?
I hope you have an open support case. There are folks on the support team that specialize in these sorts of blockers.
I do recommend installing MDE/MDAV first. It will drop into a passive mode and should run side by side with Symantec AV without interruption. Then you remove the 3rd party AV and verify that MDAV has moved to active mode. This prevents a coverage gap.
RPA is Robotics Process Automation and solution is by Automation Anywhere Enterprise 11.3.3
We are going to try the recommendation that you mention...
Thanks
Quick add is that MDAV may blocking file and network activity. File activity will be managed by exclusion policies. You also have the custom indicators to allow file hash, IPs, and domains in the MDE portal. You can also look in the device history in the portal. You should see any block activity from MDAV listed there. It may also be that the policy you are using is broader than you realize. Activating the local firewall or ASR rules for example. The Intune security baselines for example are broader than just MDE/MDAV.
Hello,
Does Windows log relevant events after you uninstall Symantec AV, install MDE antivirus, and when verifying RPA applications?
You can view it through "Event Viewer - Windows Log - Application Log".
Also, is the RPA application verification normal when using Symantec AV?
If it is normal, you can try to follow the scheme of AndrewBlumhardt-1137.
Best Regards,
Wesley Li
Do you have any other questions?
If the above reply is helpful to you, please mark it as answer.
Thanks
Hello
Do you have any further questions?
How is the issue progressing so far?
Thanks