Hi
We have SEP 12.1.4 with two SEPM servers as replication partner in same site, we want to upgrade 12.1.6.MP2 do we have to stop replication to upgrade SEPM servers or do we have to modify any setting on replicaiton partners. Or wihtout any modification or stop repliaction we can upgrade directly our replication partners.
Thanks
Hi,
I was just trying to figure out if we have an option or does Symantec maintains some kind of Freeware and Open Source Software list that are vulnerable and are blocked using some real time list available in AV?
I would want users not to install such softwares and block them using AV policies.
Thanks.
Hello everybody,
While verifying the SEP console i realized that some stations dont show up at all, so i have to uninstall the Symantec Endpoint Protection to reinstall it, it worked for some stations using the uninstall password, but for others it doesnt, it shows that the password is incorrect, i tried everything i found in your forum (registry edit, the cleanwipe tool.....) but nothing works i dont want to use ghost to reinstall the whole system cuz it takes time and time is money, i really need your help to reset the uninstall password or to disable it, i will stand by for any test you asked for, Thank you Team Symantec.
PS: when i tried the cleanwipe it did delet it but after reinstalling the symantec endprotection, the password to change settings is always wrong, and the station doesnt show up at the sep console.
Best regards.
Does it mean my system is not up-to-date?
Windows Definitions:
Latest from Symantec: 10/18/2015 r20
Latest on Manager: 10/18/2015 r1
and I have the system update daily, thanks
Hello,
We have a plan to upgrade our old PC farm to Windows 7. Our testing machine has installed Windows 7 SP1 (32-bit) and also installed Symantec Endpoint Protection 12.1.5 and also a simple .bat file that generate EICAR file automatically. They operated very smoothly and also could detect the EICAR file generated by a .bat file without any problem. However, when we tried to install Symantec Encryption Desktop 10.1 on top of the installation and invoked the .bat file to generate the EICAR file, the EICAR file could not be detected and seems that the SEP stopped operating.
Having checked with Process Explorer, it shows the System (PID = 4) process applies a file handle on it and cannot unlock the file anymore and The eicar file itself has been cleaned (byte = 0 bytes). From that moment on, SEP seems not detecting any EICAR files or risks. PGP shredder on desktop also cannot be opened.
I think it is a very serious failure of SEP when SEP got installed together with SED/PGP. And we tried the latest SEP version of 12.1.6 and also SED/PGP 10.1.3. The issue still persists. Can anyone help me?
Hello - Our SEPm was upgraded over the weekend and we are now at version 12.1.6168.6000. I was notified that there is a new SEP version (12.1.6.MP2) that was released around the 6th of October. I went to File Connect and dowloaded the files needed to load the packages into the SEPM. When I tried to upload the new packages into the SEPM - it failed and said the packages already exist. I do not see them listed. are they named differently?
were the new packages not updated (as they are still dated 7/30/2015)
See attachments.
Hi Team,
I have a SEPM 12.1.6 MP1 server with sql database in DC site and one more same version server but embedded database in DR site, So kindly suggest how i can implement it as failover and load balancer for eachother.
Hello all , I have few queries regarding remote push would appreciate if you can give your feedback
1) when we do remote push of packages from the SEPM , it always asks for domain admin credentials ( if select few clients or many) and if there are many clients in the list and for some reasons any one of the client is not availble it will again pop-up to supply credentials . Is there any way we can store the Admin credentials on SEPM in some configuration file that will be refrenced to pick up admin credentials automatically becuase it is a tedious job to supply it everytime. Secondly if there are many clients that needs to be deployed through remote push it is irriating for the Domain Admin to sit and supply everytime
2) When we do remote push from SEPM . How many endpoints should we select at one time i.e 10, 20 , 30 ? In real world what is the realistic number that it will succesfully push simulteneously at the same time
Thanks
Where can I view the logs that show Application Exceptions? I added an application to the Exception policy and chose "Log Only". But now I want to view that log where the log-only has written to.
I'm not speaking of the list of application Exceptions I've added. I want to view the log (or report or monitor) that shows on which computers the application has been an Exception.
Thanks,
Tom.
Hello everyone , just wanted to confirm one thing . endpoint agent is already updated with latest protection definations of AV , PTP and NTP and current version is 12.1.3 . Now when we do the remote push installation to point them to a new a SEPM and to upgrade client's to a latest version 12.1.6 with basic content ( with no definations ) what would be the behavior of endpoints when the client is upgraded and reporting to new SEPM ?
Would they use the existing already latest definations and would only upgrade the client version ?
They wouldn't use existing definations , once client version is upgraded . In the SEP UI for AV , PTP and NTP it will show that waiting for updates and they will download it either from a SEPM or GUP. But they won't keep using the existing updated content defs of previous client version i.e 12.1.3 will be wiped ?
Thanks
Hi my name is Henrik, im from denmark. I recently upgraded my Symantec Endpoint projektion to 12.15. Now im standing to have wWindows 10 on my computer :-). My problem is that im using an legal Symantec version , from my work, and each time i have to contact the software office to get the newer version , and they have to contact the computer Store Where is is bought. Its very difficult to get the serial number each time, so i wonder if there may be a way to find the serial on my computer.
Best Regards
Henrik Tonnesen. Sorry my english :-).
Just one thing I wanted to confirm . In envoirements where users are using proxy to access the internet . When they try to visit any site that re-directs them to a malicious site that type of attack is usally blocked by SEP . In Firewall > Browser and stealth settings > Automatically block attacker IP address for 600 seconds is checked .
Now that proxy is being used so all traffic coming in to the user will be soruced from Proxy IP address which will then be blocked by SEP . Now to resolve this we usually uncheck this option to prevent Proxy from getting blocked . I wanted to know if we keep this option checked is there any other way we can make our SEP proxy aware as not to block the Proxy IP but block the IP address of the actual attacker.
IF I add the proxy IP in excluded hosts in IPS policy would it make any difference ?
With default out of the box firewall and IPS policies configured and enabled if the above scenerio happens would the endpoints block the IP address of the Proxy ( if the above mentioned type of a attack is detected) . Thanks
I have SEPM 12.1.6 installed on Windows Server 2008 R2. I created three SEP groups named HR, Finanace, IT and move all the clients in their respective groups.
We have a requirement for different users logging in to SEPM console with AD credentials. So i did Directory Integration. After AD Sync all the computers that were in SEP groups automatically moved to AD Groups. This was an undesired outcome. How can i avoid this while still retaining the ability for users to log into SEPM console with AD credentials?
Currently using version 12.1.6 MP2 (but it also happended in MP1a) where users on Windows 10 machines take tens of minutes to logon for the first time to that machine. When I remove Endpoint Protection, users login for the first time under 30 seconds.
I know I'm probably going to have to open a ticket on this but would like to see if anyone else had this probalem as well.
Hi everyboy,
I have a issue and really need to help
My company want to move SEP to a new server with different IP and Hostname. I did following some step i read on forum
1. Install new SEPM on NEW_MACHINE with same version OLD_MACHIN (12.1). Choose Install an additional Site for Replication
2. Create a new MSL on OLD_MACHINE with priority 1 is NEW_MACHINE and priority 2 is OLD_MACHINE. After that Assign the new MSL
After 2 step above, i checked the connection status on client is connected with NEW_MACHINE but i run liveupdate on NEW_MACHINE is not working. Please help me
P/S: It message i got after run Liveupdate : LU1814: LiveUpdate could not retrieve the catalog file of available Symantec product and component updates. Please verify that you are able to connect to the Internet and run LiveUpdate again.
Thanks and Best Regards
Hello,
I have been tasked with getting SEP set up on my company's Linux environment. I have seen multiple posts and articles (on this site, and others) that go either way on the topic of whether or not SEPM can manage Linux clients.
What I need is an absolute answer one way or the other: Can you actively manage a Linux Client (Specifically RHEL 6.5/6.6 clients) with SEP 12.1.5 or 12.1.6 via SEPM? If so, how the heck do you get it to work?
My frustration with this is that I have been searching up and down the documentation for a couple days straight and seem to only find conflicting information. As soon as I get on track with something I find another article that says what I'm trying to do can't be done.
So please, anyone who knows 100% for certain whether or not you can do this, let me know.
Hi,
I need to update few clients in my company from SEP 12.1.3 to 12.1.5
My SEPM in already 12.1.5 . Can anyone help me out how to update the clients.
Hello all , I deployed a communication update package from a New SEPM server to point clients connected to existing old SEPM to this new SEPM server. The communication is being deployed sucuesfully to the clients but for some reaons they are not appearing in the new SEPM console . It is not giving any error when the communication update package is being deployed. Please find the attached screenshot.
Thanks
I work in a bilingual environment so we need SEP client in french and english but after importing the packages to the SEPM consol to get them ready for deployment, I notice 2 different version number English is showing 12.1.6318.6100 while the French is showing 12.1.6465.6200. Why the difference for both clients
Hello - I received an email from a coworker inquiring about an add-on that keeps popping up. See attachment. Add-on states it is incompatible 32 bit. He is running a 64 bit version. What does this mean? How do i stop it from popping up?
