Hi

We have SEPM 12.1.4 two SEPM servers as replication partner in same location with sam subnet. This replication is only for high availbility and failover

We want to upgrade this 12.1.4 to 12.1.4 MP1a what are procedure to upgrade replicaiton partner

Thanks

Hi,

I was testing deployment SEP clients in my test environment. I am trying to move my test machines to a production environment with new SEPM server. I am able to point the windows sep clients to new SEPM server fine. The issue is with Mac client. I followed the instructions provided here http://www.symantec.com/business/support/index?pag.... sylink.xml is properly replaced and I restarted the machine. When I go to SEP settings page on the Mac, it is still pointing to the old/test SEPM server.

Any idea what needs to be done to resolve this issue?

Thanks,

Hi,

I have a failed to connect, issue Symanetc embedded database and symantec endpoint protection manager stops at the same time. Ran db validator it says its passed.

1) Checked err.log in DB folder in SEPM 

05/04 11:34:18. Fatal error:  A disk read from file "D:\Program Files\Symantec\Symantec Endpoint Protection Manager\db\sem5.db" failed with error code: (23)
05/06 15:00:53. Fatal error:  A disk read from file "D:\Program Files\Symantec\Symantec Endpoint Protection Manager\db\sem5.db" failed with error code: (23)
05/06 15:32:03. Fatal error:  A disk read from file "D:\Program Files\Symantec\Symantec Endpoint Protection Manager\db\sem5.db" failed with error code: (23)
 

2) Ran management server configuration wizard and it pops up this error

3) Checked scm-0server-0.log and it says

2014-05-06 18:45:24.468 THREAD 12 SEVERE: ================== Server Environment ===================
2014-05-06 18:45:24.468 THREAD 12 SEVERE: os.name = Windows 2003
2014-05-06 18:45:24.468 THREAD 12 SEVERE: os.version = 5.2
2014-05-06 18:45:24.468 THREAD 12 SEVERE: os.arch = x86
2014-05-06 18:45:24.468 THREAD 12 SEVERE: java.version = 1.7.0_25
2014-05-06 18:45:24.468 THREAD 12 SEVERE: java.vendor = Oracle Corporation
2014-05-06 18:45:24.468 THREAD 12 SEVERE: java.vm.name = Java HotSpot(TM) Server VM
2014-05-06 18:45:24.468 THREAD 12 SEVERE: java.vm.version = 23.25-b01
2014-05-06 18:45:24.468 THREAD 12 SEVERE: java.home = D:\Program Files\Symantec\Symantec Endpoint Protection Manager\jre
2014-05-06 18:45:24.468 THREAD 12 SEVERE: catalina.home = D:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat
2014-05-06 18:45:24.468 THREAD 12 SEVERE: java.user = null
2014-05-06 18:45:24.468 THREAD 12 SEVERE: user.language = en
2014-05-06 18:45:24.468 THREAD 12 SEVERE: user.country = US
2014-05-06 18:45:24.468 THREAD 12 SEVERE: scm.server.version = 12.1.4013.4013
2014-05-06 18:46:02.734 THREAD 12 SEVERE: 
org.apache.tomcat.dbcp.dbcp.SQLNestedException: Cannot create PoolableConnectionFactory ([Sybase][JDBC Driver][SQL Anywhere]Database server not found)
    at org.apache.tomcat.dbcp.dbcp.BasicDataSource.createPoolableConnectionFactory(BasicDataSource.java:1549)
    at org.apache.tomcat.dbcp.dbcp.BasicDataSource.createDataSource(BasicDataSource.java:1388)
    at org.apache.tomcat.dbcp.dbcp.BasicDataSource.getConnection(BasicDataSource.java:1044)
    at com.sygate.scm.server.db.util.DatabaseUtilities.getDataSourceDBConnection(DatabaseUtilities.java:402)
    at com.sygate.scm.server.db.util.DatabaseUtilities.getDefaultDatabaseConnection(DatabaseUtilities.java:286)
    at com.sygate.scm.server.db.util.DatabaseUtilities.getDefaultDatabaseConnection(DatabaseUtilities.java:271)
    at com.sygate.scm.server.db.util.DatabaseUtilities.getDefaultDatabaseConnection(DatabaseUtilities.java:261)
    at com.sygate.scm.server.db.util.DatabaseUtilities.getDBConnection(DatabaseUtilities.java:2499)
    at com.sygate.scm.server.db.util.DatabaseUtilities.testConnection(DatabaseUtilities.java:2456)
    at com.sygate.scm.server.servlet.StartupServlet.init(StartupServlet.java:131)
    at org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java:1266)
    at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1185)
    at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:1080)
    at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:5027)
    at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5314)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
    at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
    at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:877)
    at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:633)
    at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:657)
    at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1637)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
    at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
    at java.util.concurrent.FutureTask.run(FutureTask.java:166)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
    at java.lang.Thread.run(Thread.java:724)
Caused by: java.sql.SQLException: [Sybase][JDBC Driver][SQL Anywhere]Database server not found
    at sybase.jdbc4.sqlanywhere.IDriver.makeODBCConnection(Native Method)
    at sybase.jdbc4.sqlanywhere.IDriver.connect(IDriver.java:772)
    at org.apache.tomcat.dbcp.dbcp.DriverConnectionFactory.createConnection(DriverConnectionFactory.java:38)
    at org.apache.tomcat.dbcp.dbcp.PoolableConnectionFactory.makeObject(PoolableConnectionFactory.java:582)
    at org.apache.tomcat.dbcp.dbcp.BasicDataSource.validateConnectionFactory(BasicDataSource.java:1556)
    at org.apache.tomcat.dbcp.dbcp.BasicDataSource.createPoolableConnectionFactory(BasicDataSource.java:1545)
    ... 26 more
2014-05-06 18:46:02.734 THREAD 12 SEVERE:  in: com.sygate.scm.server.servlet.StartupServlet
com.sygate.scm.server.util.ScmServerError: Failed to connect to database after tried 20 times, please start the database!
    at com.sygate.scm.server.servlet.StartupServlet.init(StartupServlet.java:132)
    at org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java:1266)
    at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1185)
    at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:1080)
    at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:5027)
    at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5314)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
    at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
    at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:877)
    at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:633)
    at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:657)
    at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1637)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
    at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
    at java.util.concurrent.FutureTask.run(FutureTask.java:166)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
    at java.lang.Thread.run(Thread.java:724)
2014-05-06 18:46:02.750 THREAD 12 SEVERE: DomainId: null
SiteId: null
ServerId: 1E3DA3270A0E0037004BDF380DAD4C96
SystemEventId: 1281
EventDesc: Unexpected server error.
MessageId: 1
ErrorCode: 268500992
com.sygate.scm.server.util.ScmServerError: Failed to connect to database after tried 20 times, please start the database!
    at com.sygate.scm.server.servlet.StartupServlet.init(StartupServlet.java:132)
    at org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java:1266)
    at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1185)
    at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:1080)
    at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:5027)
    at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5314)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
    at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
    at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:877)
    at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:633)
    at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:657)
    at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1637)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
    at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
    at java.util.concurrent.FutureTask.run(FutureTask.java:166)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
    at java.lang.Thread.run(Thread.java:724)
com.sygate.scm.server.util.ServerException: Unexpected server error.
    at com.sygate.scm.server.util.ServerLogger.log(ServerLogger.java:399)
    at com.sygate.scm.server.util.ServerLogger.log(ServerLogger.java:364)
    at com.sygate.scm.server.util.ServerLogger.log(ServerLogger.java:360)
    at com.sygate.scm.server.util.ServerLogger.log(ServerLogger.java:356)
    at com.sygate.scm.server.servlet.StartupServlet.init(StartupServlet.java:314)
    at org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java:1266)
    at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1185)
    at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:1080)
    at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:5027)
    at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5314)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
    at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
    at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:877)
    at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:633)
    at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:657)
    at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1637)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
    at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
    at java.util.concurrent.FutureTask.run(FutureTask.java:166)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
    at java.lang.Thread.run(Thread.java:724)
Caused by: com.sygate.scm.server.util.ScmServerError: Failed to connect to database after tried 20 times, please start the database!
    at com.sygate.scm.server.servlet.StartupServlet.init(StartupServlet.java:132)
    ... 17 more
2014-05-06 18:46:04.828 THREAD 12 SEVERE: SEM: Connect to database failed
java.sql.SQLException: SEM: Connect to database failed
    at com.sygate.scm.server.db.util.DatabaseUtilities.getDefaultDatabaseConnection(DatabaseUtilities.java:339)
    at com.sygate.scm.server.util.logging.DbLogHandler.publish(DbLogHandler.java:58)
    at java.util.logging.Logger.log(Logger.java:610)
    at com.sygate.scm.server.util.ServerLogger.log(ServerLogger.java:401)
    at com.sygate.scm.server.util.ServerLogger.log(ServerLogger.java:364)
    at com.sygate.scm.server.util.ServerLogger.log(ServerLogger.java:360)
    at com.sygate.scm.server.util.ServerLogger.log(ServerLogger.java:356)
    at com.sygate.scm.server.servlet.StartupServlet.init(StartupServlet.java:314)
    at org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java:1266)
    at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1185)
    at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:1080)
    at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:5027)
    at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5314)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
    at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
    at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:877)
    at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:633)
    at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:657)
    at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1637)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
    at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
    at java.util.concurrent.FutureTask.run(FutureTask.java:166)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
    at java.lang.Thread.run(Thread.java:724)
Caused by: java.lang.NullPointerException
    at com.sygate.scm.server.db.util.DatabaseUtilities.getDefaultDatabaseConnection(DatabaseUtilities.java:290)
    ... 24 more

4) Checked ODBC password and its passes.

The symantec embedded database service stays started when i run dbvalidator and odbc test but when i log into SEPM it and symantec endpoint protection manager service stops.

I've another thread o nthis forum. But I have more info now from reading the logs, so I thought I'd make a new one to see if I can get some help.

The SEPM service does not keep running anymore, when I start it, it stops after a few seconds. From the scm-server-0.log, I see the error "Login failed for user 'sem5'"

Previous to this, I did change the password for user sem5. Reason for this was we were migrating the DB and during the management configuration wizard, I had reset the credentials.

I'm hoping with this info, you can help. Please let me know if more info from logs are needed.

For now, we just need to be able to login once again to SEPM, and worry about the migration later.

Thanks in advance.

Good morning all.

I would like to run a report that tells me which settings are enabled and disabled on a per client basis. For example, we have some endpoints with Network Threat Protection disabled and others with it enabled. We would like to see a report breaking that down for us. Can this be done? We are running SEPM 12.1.4013.4013.

Thank you in advance for any help.

Regards,
Steve

Sepm showing wrong reports,some of the client systems are updated with latest definition but on sepm console it shows old definition.

Hi All,

Is there any script or shortcut to update the antivirus definitions of SEP clients so as to save our time of manual updation. Yes we can update it from SEPM by using the command "update content". But, is there any other method like by downloading the intelligent update files once & then update it to all the out-of-date machines.

Hi,

We're having a problem on upgrading SEP 12.1 RU2 to SEP 12.1 RU4 MP1a. Installation was successful, however, we got an error on upgrading the database schema. Please see attached screenshot of the error, as well as the logs prompted. Please help! Thanks.

Hi all,

I would like to enquire if the number of detections counts for the "action distribution against risks" could be reset or lowered? As the count have been increasing overtime and it currently highlights quite a significant amount of detections.

If possible, i would like to know if theres any documentations or manual that i could refer to in the understanding of how these detection counts were obtained so that a better analysis could be carried out to understnad the current security status. 

Any help provided would be deeply appreciated.

Hello,

Yesterday is checked definitions on one of my clients and i noticed they were outdated and almost a week old.
I checked my SEPM and the definitions were outdated there also.

Manually i launched live update on my SEPM and i loaded the new definitions without any problem, however today my SEPM definitions is one day older then definitions @ Symantec so i dont think my servers are updating automatically.

A kopple of days back i had a crash on my second SEPM server that does load balancing with my main SEPM server.
Can anyone assist me with restoring my automatic live updates? Im running SEPM 12.1.4013.4013

Thanks.

LEVD

Had a couple of clients mistakingly installed with a very old SEP 11 RU4 MP2 client and put into a group that has auto upgrade to SEP 12 RU4 client on it but a few of machines have failed to upgrade and rolled back. Can these machines be directly upgraded? or do the clients need to be uninstalled and SEP 12 installed directly.

Had a look at the SEP_Inst.log and can't see anything in there that suggests why the roll back happened. 

Hi,

I need to install SEP with a big number using a (Batch) and it would be great if it can set to exact time.

Thanks

I am running Symantec Endpoint Protection 12.1.3001.165.  I have logged into Symantec Endpoint Protection Manager and clicked on 'Clients' on the left side of the window.  That opens a pane just to the right that shows the group tree.  I want to change the names of 'My Company' and 'Default Group'.  I have selected 'My Company' then clicked on the 'Details' tab as that is the only tab that brings up anything about editing.  I have clicked on 'Edit the group properties' but nothing in the window that opens is editable.  The same thing goes for 'Default Group'.  How can I change these names?

Hello,

i am useing SEPM 12.1 (Evaluation Ver.) in my test environment to test the product. i have one LUA server connected to internet. LUA is able to download the updates but SEPM is not able to take those updates from LUA. Though all settings seems fine.

can any one tell is it due to License issue.

Regards,

Yudhvir Rathee

Anyone have experience with Browsersafeguard? Is Browsersafeguard considered a virus by SEP?  In our environment, it seems like this application is causing outlook to crash and quick search on the internet seems to suggest it could be malware but yet some say its a valid program.  Any opinion?

symantec latest manager version not updating after install sep clients in the server
the sep client have an live update installed.
the update run successfully but the client update not the sepm

Hola estoy intentando instalar SEP 12.1.2015 en un ultrabook con windows 8 pro, el archivo de instalacion se ejecuta pero al terminar no muestra instalado el programa, crea carpetas en el sistema operativo pero al final no instala

How can we find out what has been added to the deffinition updates? Like was the resent TA15-286A: Dridex P2P Malware vulnerability added or is it being added?

Bonjour à tous,

J'ai un petit souci avec mon serveur Symantec qui me remonte une info par mail:

"CRITIQUE : ALERTE DE CHARGE DU RÉSEAU : Trop de demandes de définitions complètes"

J'ai donc effectué la manipulation décrite c'est à dire "Empecher les clients de télécharger les packages de définition complète".

J'aimerais savoir si vous avez aussi du activer cette option et comment fonctionne elle?

Des captures sont en PJ

Merci d'avance

I recently saw an article from mar of 2015 about DRIDEX. Does Syamantec Endpoint Protection detect and protect against this type of infection/malware. I want to ensure our systems are protected, we are running version 12.1.6 currently with up to date virus definitions. Thanks in advance.