Dear,
i have only one endpoint 12.1.7166.6700 that not update virus def.
in sepm log i haven't problem:
An update for Virus and Spyware Definitions Win32 was successfully installed. The new sequence number is 170525022.
But in GUi and in SEPM I read that is not updated since 14/05/2017.
I have lauched the manual intelligent update but i have an error:
VIRSCAN.zip is not authorized for deployment. Error code : 104
How can I solve ?
Thanks
I am using 12.1 (will upgrade soon to 14).
I want to install Content Dist Monitor - i try to follow the URL below, upon logging and using my serial i cannot find any more the installer for 12.1.. it only show 14.. so i downloaded it..
Questions: Can i use the content dist monitor that i got from 14 and install it on my 12.1 environment??
Source: https://support.symantec.com/en_US/article.HOWTO124728.html
On a unmanaged client SEP scan shows it found 1 Risk. However nothing is displayed in status or in the logs. Has anyone had this same issue and if so did you find a cause?
Thank you
SEPM is integrated in AD and upon checking some clients are in USERS mode.. how can i convert it to computer mode?
Hi all,
I need run a specific command with exclusion policy.
This is the scenario:
In the SEPM I have an application control policy, blocking the sc.exe file of Windows.
But I need run the command: "sc.exe stop service", having the same secure policy only adding the exclusion. Only giving permission to run this command and not another instruction from de sc.exe file, because I don't want to unblock this file.
Is possible configure this on SEM12?
Thank you all.
I want to have a test SEPM vm similar on current setup... My plan is to clone the current VM thou I am not sure about the DB? what is the configuration and what I need to modify on cloned VM?
thanks.
I have created a location in Hyderabad like this.But the client is not taking the location.It is going to default location.
Upgraded SEP Clients ( 14 MP1-2349 ) causes application crashes . And SEP Client GUI is not opening , also when try to uninstall it with Clean Wipe tool, it is also crashes.
Thanks in advance for help !
Bonjour;
Aprés la mise à niveau vers le SP1 du Windows7, j'ai constaté que l'icone de SEPM v14 n'apparese pas!!!!
Salutations.
SEMP 12.1.6
Application Device Control > Created a rule.. Under Action there is a Send Email Alert...
Question:
Where will it send email? there are no text box to fill out who will be the recipient?
Hi, we forgot the password to the Symantec Endpoint Protection Manager and we can't reset the password because the data in the file MailConfig.properties is not correct (old mailserver IP).
If I change the data in this file, I still get no email.
I searched on our old sep server for the resetpassword tool, but is does not exist in the folder.
Is there any other way to reset the password?
Hi Dears,
Recently there were many logs triggered from our exchange servers in SEPM that the following .log files are detecting as a virus (Trojan.Pidief.X) and SEP did not do any action and left them alone. why these log files casue alert in Symantec and what is the content of these logs?
\MBXDBLogs\*\<different name>.log
example:
\MBXDBLogs\*\E1B0003805B.log
Thanks and Regards,
Hello everyone,
I've got a couple of servers which are completely disconnected from our managed network and wish to protect them from unauthorized removable media (USB sticks/external HDDs).
I've already tested the removable media settings of Windows Group Policy (GPO) but these can only prevent device driver installation, so all devices which have been connected already are not filtered out.
I need to find a way to have complete control on all removable media, whether new or old.
As I understand, i can configure something like that through SEPM with Application and Device Control (ADC) policies, but the question is, can i make similar changes on the unmanaged client directly?
Thanks in advance,
Pavlos
We have a thin client server running under Windows server 2012 r2. Problem we are having is that processing peaks, once we disable symantec client everything return back to normal.
Please help with this issue. Thanks!
I'm desperately asking for some help here.
Through the last three versions of SEP I've had the daily task of restarting services on random machines.
Each morning at leat 10 - 20 machines decide to stop responding. I look at the services and SEP is STOPPED.
It's not always the same machines. Different each day.
It takes me hours of time between managing my other duties to get everything operational again each day. Why does this keep happening and why doesn't anyone fix it?
In an attempt to partially automate the procedure, I wrote a small batch script I can call to restart the service remotely but this is also tedious.
The service is set to restart if it stops so why is it stopping and not restarting?
Please help. I'm at the end of my rope here.
I am about to upgrade my SEPM from 12.1.5 to 14. There are at least 30 clients still running XP (yeah, I know!) Is it correct that they will not be able to upgrade to Client version 14, but they'lll still be ok to run on 12.1.X under a version 14 SEPM?
Also, If I setup AutoUpgrade on SEPM what happens with the XP systems? Will they attempt to upgrade and run into an error, or does it automatically detect not to upgrade those systems?
Is there a way we can update the virus definition offline?
For eg, download it from the Symc database, pump it to a usb thumb drive and update the client offline.
Some of my client's PC are not connected to the internet.
Dears,
Symantec only stated that AML recognize malicious attributes and defines the rules that the AML engine uses to make detections.
can anyone provide further explanation of how it works or provide a link that explains it?
Thanks in Advance.
Dears,
From what I can read from Symantec help blood hound isolates and locates the logical regions of a file to detect a high percentage of unknown viruses. Bloodhound then analyzes the program logic for virus-like behavior. but I cant make since out of this phrase....
Can anyone clarify?
Thanks in Advance.