Symantec Endpoint Protection security policy may block the VCS Cluster Configuration Wizard

Last published : Oct 01, 2026
While configuring a cluster, the VCS Cluster Configuration Wizard (VCW) may fail to ping systems that are selected to be a part of the cluster. As a result, you cannot configure the cluster. This may happen in case Symantec Endpoint Protection (SEP) client is installed on the selected systems. VCW uses Internet Control Message Protocol (ICMP) to ping systems and ICMP traffic is blocked in SEP, by default.(1315813)
Workaround: Create a custom rule in SEP to allow ICMP traffic in both directions.
Ensure that you create this rule on all the systems that are going to be part of the cluster. Refer to the SEP documentation for instructions.
Related information