We're having issues with anti-virus updates where it replaces the local system's NIC driver with their own.
It generates this error into the Orion Events console and makes it look like the node has lost SNMP by putting it into an Unknown state:
Mynodename Broadcom NetXtreme Gigabit Ethernet- Interface Polling stopped. Could not remap interface. Check ifDescription change.
The fix turns out I have to Node Admin to the node, delete interfaces, re-discover, re-poll etc to get it back right.
Has anyone else been seeing this or have a 'permanent' fix they can offer?
It's called the TEEFER2
The Teefer2 driver is responsible for capturing all network traffic entering or leaving a particular interface so that the packets may be passed to the personal firewall component of the SEP 11.0 client for analysis.
The Teefer2 driver works, in tandem with its associated miniport driver.
The Teefer2 driver runs in kernel mode, and passes information over to the teefer.dll for user mode operations.
Since all in- and outbound traffic is filtered through this driver, firewall rules are applied to all traffic passing through it.
Please note that it is not possible to disable the Teefer2 driver without removing SEP 11's firewall component.