SEPM 12.1.4023 Performance

March 21, 2014, 7:56 am

≫ Next: Exception Error - Update settings failed, contact Admin

≪ Previous: Autoupgrade IPS removal not working

I need a solution

We've had a couple of issues with SEPM 12.1.4023 performance issues - or what appear to be performance issues.

The SEPM native web site ceases to work and only a system reboot seems to resolve this
Notifications pertaining to virus outbreaks and remediations are sent out days later, often 3+ days after the malware was contained and the infected file deleted

SEPM in our enterprise is running on VMware guest, Server 2012 R2 Datacenter, 8GM RAM.

Any ideas / thoughts are much appreciated...

-SEPM User

DelayedNotification.jpg

↧

Exception Error - Update settings failed, contact Admin

March 21, 2014, 10:26 am

≫ Next: SEP client reports "Not Avaliable" on SEPM

≪ Previous: SEPM 12.1.4023 Performance

I need a solution

Good Morning - I have a user who receives the attached message every time he turns on his PC and logs in. Do you now what this means and how to fix it?

"Exception Error"

Update Settings failed. Please, contact administrator

thanks

Solo

error.docx

1395424210

↧

SEP client reports "Not Avaliable" on SEPM

March 21, 2014, 11:31 am

≫ Next: ScanDetail

≪ Previous: Exception Error - Update settings failed, contact Admin

I need a solution

Hi,

Many of my SEP clients are reporting "not avaliable" on SEPM console, please do not suggest uninstall and reinstall or repair as there are too many clients to be done on.

Troubleshooting stes done:

1) Waited for clients to take new updates, it did does take new updates but still does not reflect on SEPM

2) topped SEPM service and SEPM web server services and then delted .tmp and .err from agentinfo folder and then delelted the client from the group still the client reports as "not avaliable"

What do i do to fix this issue other than repair and cleanwipe..

Client version is 12.1.2

SEPM version is 12.1.4

↧

ScanDetail

March 22, 2014, 11:03 pm

≫ Next: ProactiveThreat

≪ Previous: SEP client reports "Not Avaliable" on SEPM

I need a solution

We have SEP 12.1.4 and we have one shared file server which has around data in TB we have scan manually the whole file server with full scan but we think it did not scan every disk, there are 15 hard disk on this server. Can we see the detail of full scan that it scan each disk and directory and each file, so we can confirm that it has done through scan of server with all disks on server

in screen total files are very fews as compare to data on server.

Thanks

↧

ProactiveThreat

March 24, 2014, 12:42 am

≫ Next: SEP 12.1.4 Firewall in Hyper-V installed with Ms.Exchange Server 2013

≪ Previous: ScanDetail

I need a solution

We have SEP 12.1.4 and one of our client does not have updataed Proactive Threat Protection

on status it show, what coudl be reason, even I have downloaded manually signature file from symantec site but not updated

Virus & Spyware Threat

March 23, 2014 r20

Proactive Threat

January 4, 2014 r15

Network Threat

March 21, 2014 r11

regards

↧

SEP 12.1.4 Firewall in Hyper-V installed with Ms.Exchange Server 2013

March 24, 2014, 1:33 am

≫ Next: Need to reconfigure definition updates for SEPM sites.

≪ Previous: ProactiveThreat

I need a solution

Hi All,

I just installed new server with Win 2012 Standard Server as the host. I created 2 Hyper-V machine : Exchange Server & Domain Controller. Both are running OK with the client. Then i installed SEP 12.1.4 Unmanaged Client for both host and virtual machine. I have 2 questions :

1. Is it the best practice with installing SEP 12.1.4 each server ?

2. After installation of SEP 12.1.4, exchange server couldn't connected to the client, i'm sure it's because the firewall in SEP, can u guys suggest what port that must be opened in the rule of SEP firewall?

Any ideas??..

Thank You.

↧

Need to reconfigure definition updates for SEPM sites.

March 24, 2014, 2:52 am

≫ Next: SEPM download workflow

≪ Previous: SEP 12.1.4 Firewall in Hyper-V installed with Ms.Exchange Server 2013

I need a solution

Hello,

I have a situation where SEPM was deployed to two small sites, neither having knowledge of the other. This was originally done to minimise network overhead caused by definition updates and communications between the clients and the management servers. What wasn't realised at the time was that people from one site frequently work at the other, and when they do, their laptops "phone home" for updates, causing major network slow-downs, affecting their ability to connect to the Citrix servers at head office.

SEPM services are currently disabled until a solution can be found.

As far as I can see, there are three possible solutions:

Re-direct all SEP clients to the head office SEPM server and configure GUPs at each site. Pro: ease of administration. Cons: having to re-direct all those SEP clients. SEPM traffic between sites and head office.
Remove the SEPM server from one of the sites, and re-direct its clients to the SEPM server at the other, configuring a local GUP. Pro: No SEP traffic between sites and head offic . Con: having to re-direct several clients.
Configure a GUP at each site to serve laptops from the other site. Pro: Quickest solution to set up. Con: Not the most efficient setup.

I'm inclining towards option 3, seeing as the infrastructure is already installed and it's the quickest solution to configure, but any input would be appreciated. The critical thing is that, having made the policy change to use the correct GUP for each location, I need clients to start using them straight away, and not start taking updates from the SEPM unless the new policy has already kicked in, and they're on the subnet as the SEPM. What I'm trying to avoid is re-enabling the SEPM services and immediately triggering another network slow-down.

Questions:

Is it possible to temporarily disable definition updates in order to make sure the that policy has been received first?
Is it possible to restrict the hours during with the SEPM can pull down updates from the Internet, and during which the GUP can pull down definitions from the SEPM (i.e. not during office hours)?

↧

SEPM download workflow

March 24, 2014, 3:20 am

≫ Next: ScanonWrite

≪ Previous: Need to reconfigure definition updates for SEPM sites.

I need a solution

Hello,

my SEPM download updates for clients from Local LUA. Can someone explain me the workflow of data from the LUA to the SEPM server (until the Content folder) ?

thanks in advance,

Regards

↧

ScanonWrite

March 24, 2014, 4:46 am

≫ Next: SEPM Dashboard

≪ Previous: SEPM download workflow

I need a solution

We have SEP 12.1.4 and want to configured scaning of files when files are written to SEP client hard disk, but if somebody accessing (reading) either locally or from network it should not scan, it is default behaviour or we can configured this.

And If I have run full scan on my SEP clients and next time if I run again full scan does SEP client will scan all of files or only new files and files are modify after previous full scan.

Thanks

↧

SEPM Dashboard

March 24, 2014, 4:48 am

≫ Next: When logging into the SEPM server console from my PC it takes an exceptionally long time

≪ Previous: ScanonWrite

I need a solution

SEPM date and endpoint status is not changing (Dashboard), but the server & reporting clients are updated with the latest defintion.

SEPM Version 12.1 RU4

↧

When logging into the SEPM server console from my PC it takes an exceptionally long time

March 24, 2014, 6:06 am

≫ Next: GUP content location change

≪ Previous: SEPM Dashboard

I need a solution

Hello all, here is what has been going on. When I went to do a ping on my SEPM box it continually resolved to an IPv6 address, which we do not use at this point. I also saw that there was a full installation of the SEP client, I then removed the NTP and the PTP. Now when I attempt to get to the manager from my PC it says "This may take serveral seconds" and it will just hang there like it wants to log in but it has yet to do so. On the server itself I was able to log in immediately without any issue or latency. Any advice on what to check or how to get this working properly so I can access this console from my desktop once again?

Thank you

↧

GUP content location change

March 24, 2014, 7:02 am

≫ Next: SEP 12.1.4013.4013 Disabled XP FIrewall (AGGG!!!!)

≪ Previous: When logging into the SEPM server console from my PC it takes an exceptionally long time

I need a solution

Hi,

I have a situation whereby I need to change the GUP content location and am writing to ask if these is possible and how it can be achieved.

Using SEPM 12.1.3

Clients on 12.1.3 also

Thanks

↧

SEP 12.1.4013.4013 Disabled XP FIrewall (AGGG!!!!)

March 24, 2014, 10:57 am

≫ Next: Upgrade SEPM to 12.1.4 now clients missing from groups

≪ Previous: GUP content location change

I need a solution

On clean install Xp sp3.

If a install the sep without network protection, just only Antivir and antyspyware protection, the firewall on control panel (Xp sp3) looks disabled, grayed.

I can not understand what happend, but i want continue using xp firewall but with this product is impossible!.

I try to uninstall SEP and does not work, uninstall is ok but the firewall still disabled grayed......

↧

Upgrade SEPM to 12.1.4 now clients missing from groups

March 24, 2014, 1:51 pm

≫ Next: server using up too much bandwidth

≪ Previous: SEP 12.1.4013.4013 Disabled XP FIrewall (AGGG!!!!)

I need a solution

Hi all,

I have a case open with Symantec, but wanted to ask here too. There was a similar post, but no resolution.

After upgrading the SEPM console from 12.1.2015.2015 (RU2) to 12.1.4023.4080 (RU4a), the clients no longer show in any groups in the SEPM console; the groups are empty. The clients are talking to the server just fine and are getting their policies and updates. In fact, the troubleshooting screen on the client shows them in their respective group. My SEPM server is Win2008 R2 x64 pointing to a SQL 2012 database, and has been running RU2 just fine. Clients are a mix of RU2 and 12.1.1000.157 (RU1).

SEP Support had me uninstall/reinstall RU4a from the server, then try copying a sylink.xml file to a client, then try creating a group and adding a client to it with a remote push, etc. But like I said, the clients communicate just fine. They’re just not showing in the groups in the SEPM console. I also tried changing the views and filters on a group. Any ideas?

Regards,
Tom.

↧

server using up too much bandwidth

March 25, 2014, 2:38 am

≫ Next: Uninstall Symantec Critical System Protection from SEPM

≪ Previous: Upgrade SEPM to 12.1.4 now clients missing from groups

I need a solution

hi guys

i recently found out that our symantec anti virus server is using too much bandwith, a sepm is installed on the server and we havent started deploying clients yet and we have not been pulling updates from it but it uses too much bandwith more than the other severs we have. what could be the reason for this?

↧

Uninstall Symantec Critical System Protection from SEPM

March 25, 2014, 3:02 am

≫ Next: Symantec EndPoint don't block exe

≪ Previous: server using up too much bandwidth

I need a solution

Hello,

We have some 40 servers running with symantec cSP and need to unistall CSP and install SEP client through SEPM.

Can this be done at a single shot , unistall CSP and install SEP.

Do we reqire a reboot ?

If no option to uninstall from SEPM , wat are the other ways to do it.

↧

Symantec EndPoint don't block exe

March 25, 2014, 4:42 am

≫ Next: SEP upgrade package size

≪ Previous: Uninstall Symantec Critical System Protection from SEPM

I need a solution

1. on first install i marked which folders to proectect and not i can't find it- how do i get to the defenitions from the GUI?

2.on specific folders' to which i marked, files are uploaded.

the problem is that if exe was renamed to txt, the antivirus don't recognize it's exe and don't block it - why?

thanks for any help

↧

SEP upgrade package size

March 25, 2014, 6:07 am

≫ Next: Can SEPM 12.1.4013.4013 manage SEP 12.1.2015.2015 / 12.1.3001.165 ??

≪ Previous: Symantec EndPoint don't block exe

I need a solution

Hi Everybody,

I am going to upgrade from 12.1 to 12.1.4 a can anybody let me know the exact size of the package sent to clients? and Once i had tried upgrading clients and choose it to one week to optimize bandwith but the upgrade process failed.

↧