Hi,
We're switching to Symantec Endpoint Security version 14. I have a Hyper-V virtual guest (win 2008 r2) on a Win 2012 host. I need to know the best practises in this case.
I'm planning to install it on both but exclude virtual file from the host scanning. Is that a sound approach? Any guideline for ver 14?
I found this link but the PDF is not downloadable (it gives error)
https://support.symantec.com/en_US/article.TECH197...
Thanks
I am using 12.1 Ru6, approx 3000 clients are showing "Download Protection Content" is out of date.
Hi all,
The Windows 10 Creators Update is expected to be released sometime in April 2017 unless MS hits a snag. Any word if Ver 14 and Ver 12.1 will be ready for that update? I am sure most of us will be delaying the update for a bit but I want to be proactive on this if possible. I participate in the Insider program and am reading the current Build 15063 is expected to be the RTM Build. Input from Symantec would be appreciated
Thanks!
CQ
I currently have 2 SEP servers in our DMZ. We are moving our datacenter to an offsite location which means a new DMZ. I'm a little unsure whether it is better to setup new servers or clone the ones that I have. Also the IP address will change for the servers. Will that be a problem? Has any one done this before?
Hi,
We are installing the SEP 14 onto a group of computers that will not connect to the internet. However, after installation, we are not able to perform a scan as the definition updates are missing. Once we have downloaded the latest updates from the Symantec website, we are unable to install them onto the machine and got an error saying:
"Your virus and spyware definitions are missing or corrupted". This is the first installation and we have not installed any def updates before, so there should not be any corrupted files, unless it's the one we tried to install.
I've also made reference from some of the answers in this community to stop the SEP service, "delete" the definitions (which were not on the machine btw) and edit the registry (also not found) and restart the SEP service.
Hi,
I have 2 domains that aren't trusted and can't communicate to each other.
Each domain has a domain manager server, Windows 2012 R2
I need both manager servers to have Symantec Endpoint Protection Manger installed.
I have 1 licence already being used on one domain manager server, can I use the same license on the other domain manager server?
Thanks
Hi,
Does anyone have SEP Components running in a Workflow with SEP 14 MP1? Since upgrading from SEP 12 I have problems running the workflow using the Sep components.
The article here https://support.symantec.com/en_US/article.HOWTO55918.html points to version 12.1 and nothing more. Also the "setting" tab where you could activate web services earlier seemed to dispappear from the console.
So far the first person from Symantec support I talked with said the services should be still there. When trying to fix the problem with another person from support, that person was suddendly unsure if it should work or not.
Stefan
Hello,
we have VDI thin clients in organization with limited Hard disk space.
I can't install SEP client on this virtual machines, because there is not nought disk space.
Have Symantec some light version of clients for VDI clients?
Operating system on Thin clients is Windows 7 professional, not Embeded Version.
Thank You advice.
Regards,
Guram
Good morning,
We have a set of Remoted Desktop Session hosts that seem to have their CPU pegged while ccSvcHst is running at very random times. It appears random but I could also be missing somehting in the configs. Sometimes the Defwatch Quickscan takes minutes, sometimes hours and it is always at random times during the day. No time is the same for the past month. There could also be numerous scans during the same day.
Is there a way to tone back some of these scans to only do it at night? Am i to assume that any time someone logs in, it will to a quick scan or some iteration of a quick scan?
We have a v14 server backend but these clients are still running v12. I plan on upgrading the clients this weekend due to the need for uptime but this behavior was happening when we had v12 installed.
Thoughts as to why this seems random and possible fixes that I have overlooked in the policy configs?
thanks!
Hi,
Looking at your whitelisting service I realise that it is inadequate for some companies needs.
I have the ability to update and publish software onto my website for customers to download on the same day as we make the code change.
If I submit it on your whitelisting service your whitelisting takes 7 days and is only for that specificversion of the software. I might have released 2,3,4 new versions since that last submission.
So, when our mutual customer updates their software your endpoint manager will delete it as soon as it's downloaded. I cannot add a 7 day delay as customers want to receive their software ASAP.
Do you have any other whitelisting services that are based on the digital certificate that an exe is signed with?
Your Endpoint Manager has deleted bessential usiness software from your clients servers at several locations on the same day.
I would like to find a solution for the problem and I think if I get my software whitelisted direct with you then that would be a good solution, however the service you offer currently is not sufficent for agile development houses.
Regards
Robert
Estou tentando a dois dias instalar o Symantec Endpoint Protection Manager 14 em um novo servidor, entretanto não consigo.
Tentei inicialmente a versão 14, e em seguida a 14 MP1, mas sem sucesso.
Tentei até utilizar o CleamWipe, para apagar qualquer resquício de instalação anterior.
Estou fazendo a instalação do zero, sem migrar os dados do servidor antigo.
Após finalizar a instalação, ao verificar o serviço NT SERVICE\semsrv, o mesmo está parado.
Quando forço ele a iniciar, ele inicia, mas alguns segundos depois ele para.
Verifiquei os logs, e encontrei o seguinte erro:
2017-03-29 16:48:59.162 THREAD 13 GRAVE: Unknown Exception
com.symantec.slic.SlicException[SLICSTATUS_CANTMAKEDIR]: Cannot create directory: C:\ProgramData\Symantec Shared\Licenses\
at com.symantec.slic.TemporaryLicenseManager.a(TemporaryLicenseManager.java)
at com.symantec.slic.TemporaryLicenseManager.<init>(TemporaryLicenseManager.java)
at com.symantec.slic.LicenseIterator.<init>(LicenseIterator.java)
at com.sygate.scm.server.licensemanager.LicenseManager.assessLicenseState(LicenseManager.java:2728)
at com.sygate.scm.server.licensemanager.LicenseManager.checkLicenseState(LicenseManager.java:843)
at com.sygate.scm.server.licensemanager.LicenseManager.initialize(LicenseManager.java:1803)
at com.sygate.scm.server.licensemanager.LicenseManager.<init>(LicenseManager.java:157)
at com.sygate.scm.server.licensemanager.LicenseManager.getInstance(LicenseManager.java:169)
at com.sygate.scm.server.servlet.StartupServlet.startServer(StartupServlet.java:658)
at com.sygate.scm.server.servlet.StartupServlet.init(StartupServlet.java:174)
at org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java:1269)
at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1182)
at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:1072)
at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:5368)
at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5660)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145)
at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:899)
at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:875)
at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:652)
at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:679)
at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1966)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)
Nos logs de evento do Windows (Server 2012 R2) encontro as seguintes mensagens:
Fonte: semsrv
ID: 4096
Mensagem: O Java Virtual Machine foi encerrado com código de -1, o serviço será interrompido.
Fonte: semsrv
Evento: 5
Mensagem: O Symantec Endpoint Protection Manager será encerrado em resposta a uma solicitação 'stop' do Gerenciador de controle de serviço. Esta é apenas uma mensagem informativa. Nenhuma ação por parte do usuário é necessária.
Mais logs:
2017/03/29 16:48:23:352 : main : Initiating new JVMProcess on RMI[1100] -- Params[[sepm, 1100, 16891295]]
2017/03/29 16:48:31:745 : RMI TCP Connection(1)-192.168.1.21 : [com.creamtec.ajaxswing.ClientAgentImpl] Initialization complete, instances in JVM = 1
2017/03/29 16:49:01:937 : Thread-1 : [com.creamtec.ajaxswing.JVMProcess$1] Health check failed, exiting
Segue em anexo os arquivos de logs, da pasta tomcat/logs
Hi,
Need assistance, as the SEPM 14 MP1 console password is showing locked.
Tried resetting the password with the help of resetpass.bat file but it did not help.
Also Tried resetting password using "Forgot Password" option, but did not receive any email with the link to reset the password (email id isalready configured).
Urgent assistance required.
Hello,
I am not able to allowing USB device to client, every time I have to add same device ID which is already allowed in Exception list into SEPM firewall policy.
Regards,
Himani s Tondlekar
Hi
I run "vietool.exe C: --generate" when building vDisk for my Citrix environment.
Is it possible to see any log file somewhere if this goes OK or not? Or can I check that this is working as intended?
The Virtual Image Exception is enabled in my Virus and Spyware Protection policy.
Thanks
Torsten
I have one client that is showing the definition version that hasn't been published by Symantec. Pictures attached.This is the client that is on the same server as SEPM. All are using the same policy settings.
Hi
I'm running Sep V14 MP1.
I've noticed a strange behavior in my environemnt regarding the FW Traffic Log.
I see the logs at the endpoint, but when I look for them in the manager I see that it takes alof of time for them to appear. Can even take 45 minutes.
Sometimes logs are not arriving at all.
Someone have an idea why this is happening?
Thanks
Hi team,
Is Windwos server 2008 standard SP2 (version 6.0) supports SEPM 12.1.6 MP7.
Hi All, Could anyone help me with address below points from customer,
1. Please highlight the technical points with page numbers in the Product data sheet of the proposed product.
2. The proposed solution should automatically uninstall existing AV solution during remote installation and configuration and proof should be available in product data sheet. Appreciate your prompt reply.
appreciate any help
hi,
i have the following problem after a failed update from SEPM 14 to the latest MP1 14.0.2349.0100.
The Update corrupted the SEPM installation, it's so bad that a repair over the configuration manager is not possible.
I got a DB backup, i removed the corrupted installation and also cleaned the System with cleanwipe.
Now it's not possible to reinstall SEP 14 to get the state back i had before the Update to MP1.
I always get the following errors:
this is tested with a local administrator account over RDP with mstsc /admin.
Also the System is not joined in a domain.
We had this on two different Systems already, a case with Symantec is open, but nothing new so far.
i will attach the install_log in a moment..
Anyone had this before?
Hi all,
Current situation: I have 2 SEPM consoles, one is version 14 and the other is version 12. I would like to remove the SEPM 12 console completely and move all clients over to the SEPM 14 console.
I know i can replace the sylink.xml file but having to do that manually on over 60 servers will take an age.
Is there any quicker way of migrating all clients over from SEPM 12 over to SEPM 14