Hi, yesterday we installed a new v14 SEPM, and I registered the 4 licenses we have. Now, when I open the client and click Help/About, it shows "Trial license. Expires: Saturday, March 17, 2018". How can I fix this? Back in the old days, you used to have to delete the Trial License on the server, but it doesn't appear that that is an option with v14.

By the way, could someone put "Windows Server 2016" in the Operating System pull-down above? I chose "Not Applicable" because that option isn't available. Thanks.

↧

Update Globallist.xml manually

January 17, 2018, 8:05 am

≫ Next: Upgrade from 12.1.5 to 14.X

≪ Previous: Registered v14 client has "Trial License" on server

I need a solution

Hello,

I have this situation. One SEPM console with servers, another SEPM console with computers. I have the same LU policy on both to use the srevers as GUPs. This was working ok until one day, all the clients stop using GUPs and the sylink debug throw the following message:

01/17 11:02:50.807 [4328] [Content]<LUThreadProc>GUP address is empty.. No more GUP to use - maybe all of them may have failed.. Backoff/ or switch to SEPM are the options.

The file Globallist.xml is empty indeed on the SEPM where the computers are, but is ok on the other SEPM where the servers are.

Two questions:

Is there any chance that this architecture works?

Can I manually change the globallist file?

Thanks

Regards

↧

Upgrade from 12.1.5 to 14.X

January 17, 2018, 10:46 am

≫ Next: Licenses covering ver 12 and ver 14

≪ Previous: Update Globallist.xml manually

I need a solution

I will be installing SEPM 14.X on a different server than our current 12.1.5 SEPM. I am hoping for a smooth transition.

It is my understanding that after installing the 14.X SEPM, I can have the 12.1.5 clients report to the SEPM 14.1 console by modifying the MSL under the Policies on the 12.1.5 SEPM. Is it as simplistic as this, or are there additional items that must be done?

I plan to create new custom SEP installation client packages for our servers and workstations in 14.X. As time permits, I will uninstall the 12.1 clients from the workstations, and install the 14.X clients. Are there any know issues doing this?

Any information will be helpful.

Thanks!

↧

Licenses covering ver 12 and ver 14

January 17, 2018, 2:33 pm

≫ Next: Symantec Endpoints getting corrupted

≪ Previous: Upgrade from 12.1.5 to 14.X

I need a solution

I didn't deal with the purchasing angle on this so I'm not sure on what those details are. I think we repurchased licenses when we were mostly ver 12. ver 14 was out so we go that but continuing with ver 12 was still ok.

If I have two SEP licenses, does a ver 14 license cover machines that still have ver 12 on them? I see one says ver 12. The other says ver 14. The times they expire are different. If all licenses are made ver 14, does that matter if some machines are still on ver 12?

↧

Symantec Endpoints getting corrupted

January 17, 2018, 9:30 pm

≫ Next: Problems showing up when launching Symantec Endpoint Protection

≪ Previous: Licenses covering ver 12 and ver 14

I need a solution

Hi,

From last 2-3 days, we are seeing Symantec Clients getting corrupted and services getting stopped. Please let us know the possible reason and troubleshooting which can be done.

Thanks,

Anishk

↧

Problems showing up when launching Symantec Endpoint Protection

January 18, 2018, 1:43 am

≫ Next: Local accounts disable

≪ Previous: Symantec Endpoints getting corrupted

I need a solution

Hi there,

I am running Symantec Endpoint Protection version 14 (14.0 MP2) on Windows 10.

Each time I start my computer, Windows 10 gives me a notification comming from Symantec Endpoint Protection saying that the product requires my attention.

Also, if I put the pointer of my mouse (without clicking) on the Symantec icon on the notification zone, there is a message indicating that there are several problems.

When I launch the Symantec interface, I see nothing and everything seems to work correctly.

How I can see what problems Symantec is talking about? How I can solve this?

Of course, the client has been updated recently, and the virus signatures too.

My entire company is using this soft, and I am the only one with this problem.

Any help of that is (more than) welcomed.

Thanks & cheers, Eric.

↧

Local accounts disable

January 18, 2018, 3:18 am

≫ Next: Upgrading External DB

≪ Previous: Problems showing up when launching Symantec Endpoint Protection

I need a solution

Hi,

Is there any way to disable the local computer accounts by using symantec?

↧

Upgrading External DB

January 18, 2018, 8:45 am

≫ Next: error in "Network and Host Exploit Mitigation" after upgrading

≪ Previous: Local accounts disable

I need a solution

Hello,

We are planning an upgrade from 12.1.x to version 14. We are running an external db that is not compatible with version 14 so we need to do a db upgrade. My question is what is required when performing an external database upgrade. Can replication stay enabled since it is just the DB version thats being changed. We have a small lab I am going to test in but I am looking for some input/reccomendations prior to upgrading.

Thanks.

↧

error in "Network and Host Exploit Mitigation" after upgrading

January 15, 2018, 2:49 am

≫ Next: Upgrading External DB

≪ Previous: Upgrading External DB

I need a solution

Hello,

I get an error on cilents that updgrded from 14.0.2415 to 14.0.3876, the ""Network and Host Exploit Mitigation" stuck on waiting for update

i attache the snapshot form client, also get notifiction on SEPM "FILE Replication Lookup Alart"

Any help please

Thanks

sep.JPG

↧

Upgrading External DB

January 18, 2018, 8:45 am

≫ Next: File Reputation Detection Triggering Notification

≪ Previous: error in "Network and Host Exploit Mitigation" after upgrading

I need a solution

Hello,

Thanks.

↧

File Reputation Detection Triggering Notification

January 18, 2018, 8:53 am

≫ Next: Uninstalled SEP 14.x and Windows 10 Defender will not start

≪ Previous: Upgrading External DB

I need a solution

Hi guys,

SEP manager 14 is installed on Server 2012 R2 in our company, where we had no internet access, but only intranet. So we are fine that we always receive the following notification :

13 computer reported file reputation lookup issues.

Symantec Endpoint Protection

File Reputation Detection Triggering Notification on 01/18/2018 12:23:24

Updated since 01/17/2018 12:23:00

Computer
Current User
IP Address

Domain Name
Server Name
Group Name

Product Version

File Reputation Detection

Event Time

PC_X_XXXX

1 XXXXXXX

XXXXXXX

Company\XXXXXXX

14.0.2349.0100

Reputation check for unproven files failed because of network errors for the last 3 days.

01/17/2018 23:07:32

PC_X_XXXX

1 XXXXXXX

XXXXXXX

Company\XXXXXXX

14.0.2349.0100

Reputation check for unproven files failed because of network errors for the last 3 days.

01/17/2018 21:37:33

But it's really noising us that we are receiving everyday such alarms.

Could you please guide me how can I turn off this notification but ensure all the other notification keep running ?

Thank you in advance!

Best regards,

Jsprite

↧

Uninstalled SEP 14.x and Windows 10 Defender will not start

January 18, 2018, 1:35 pm

≫ Next: multiple issue를 해결하기위해 ?

≪ Previous: File Reputation Detection Triggering Notification

I do not need a solution (just sharing information)

I just uninstalled Endpoint Protection, rebooted, and now Windows 10 Defender will not start. When I go to the Windows Defender Security Center - Virun and Threat protection shows that the service has stopped. When I select the Restart Now button I get a message saying "Unexpected error. Sorry, we ran into a problem." I've tried going into Services and maually restarting it and there I get a message "Windows could not start the service, Erro 577 Windows cannot verify the digital signature for this file..."

Any ideas on what to try?

↧

multiple issue를 해결하기위해 ?

January 18, 2018, 4:58 pm

≫ Next: Symantec LUA GUI problems

≪ Previous: Uninstalled SEP 14.x and Windows 10 Defender will not start

I do not need a solution (just sharing information)

Do I need to download and install only the Windows hotfix?

It is very uncomfortable for companies without WSUS.

KB4073290 Does Not Appear in Automatic Updates

Are you kidding me?

Then the administrator should update itself?

↧

Symantec LUA GUI problems

January 18, 2018, 11:46 pm

≫ Next: Package creation

≪ Previous: multiple issue를 해결하기위해 ?

I need a solution

Hello,

we have some trouble with our LUA Server. After an Restart of the System, the downloads of the definitions stoped at 99%.

We figured out, that the Server tried to find some files, that are apparantly not avaliable anymore. Also we figured out that the automatic purging of old files did not work.

So we deleted all the old content by hand and let him run the download again. That worked, however only to be stuck at the deployment at 0% for no apparant reason.

Then the services, LUA Tomcat and PostgreSQL have been restarted, in the hopes that that might do the trick.

Now the GUI of the Webaccess seems to be broken. It cannot show the configuration page (Error 404) and if i want to manually start some download or distribution, windows are not shown correclty.

We had a similar issue after a restart of the Machine, however that "went away" after a couple of days. I am not a believer in magical self healing of systems and don't want to count on it.

So i would like to know what could be the cause and how to repair it manually?

But i am relativly clueless were to start the search. Is it a database problem? Is it maybe connected to other services?

If anyone of you has some ideas, that would be a great help.

We have the version 12.3.4.16

Unfortunatly i do not have the option of reinstall. I have to work with what i have.

↧

Package creation

January 19, 2018, 12:57 am

≫ Next: Query on Log/Report

≪ Previous: Symantec LUA GUI problems

I need a solution

Hi All,

I have created a package with Silent installation option but I have found below settings in SetAid Configuration file. May I know what might be the reason.
-------------------

[CUSTOM_SMC_CONFIG]
InstallNewInstanceOnly=0
InstallUserInterfaceLevel=s
KeepPreviousSetting=1
InstallationLogDir=%TEMP%\SEP_INST.LOG
DestinationDirectory=
LaunchIt=1
AddProgramIntoStartMenu=1

-------------------

↧

Query on Log/Report

January 19, 2018, 5:21 am

≫ Next: Endpoint Protection Service stop at every start and system tray icon reports multiple errors.

≪ Previous: Package creation

I need a solution

Hi All,

Which log/report will be useful to identify computers which do not have Firewall feature?
Which log/report will be useful to identify computers which have only AV without Lotus and Outlook?

↧

Endpoint Protection Service stop at every start and system tray icon reports multiple errors.

January 19, 2018, 2:24 am

≫ Next: Clients should not come to another sites

≪ Previous: Query on Log/Report

I need a solution

Symantech entpoint protection service automatic stoped at every time on new installation on a particular window server 2012R2 Server.

When try to start service manually it got start but agin it stop at same time.

Tried many time to do but getting same problem.

On windows event viewer below mentioned error found.

Faulting application name: ccSvcHst.exe, version: 12.12.1.15, time stamp: 0x573cfe4d
Faulting module name: SfMan.plg, version: 12.1.7004.6500, time stamp: 0x576a271f
Exception code: 0xc0000005
Fault offset: 0x0001158e
Faulting process id: 0x177c
Faulting application start time: 0x01d390e9725fe34c
Faulting application path: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.7004.6500.105\Bin\ccSvcHst.exe
Faulting module path: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.7004.6500.105\Bin\SfMan.plg
Report Id: b07a1ad9-fcdc-11e7-80f0-0cc47a694749
Faulting package full name:
Faulting package-relative application ID:

↧

Clients should not come to another sites

January 19, 2018, 3:52 am

≫ Next: Product error requires attention

≪ Previous: Endpoint Protection Service stop at every start and system tray icon reports multiple errors.

I need a solution

Hi,

I have installed one primary site(Global) along with two additional sites(Delhi and Hyderabad).I want Delhi clients should not come to hyderabad(oneline on remote site) and vice versa( oneline on remote site).Is it possible?

↧