Hi,
I am wondering why the LUA embedded database is decreasing size during the week, because our purge database task is scheduled to start on Sundays night.
Is it the normal behave? Does anyone know how it works internally?
Thanks in advance.
Hello,
New to SEPM and need some assistance. Currently we are pushing out one package install and all new devices/clients are added to our general group under the root. Im wanting to have these new machines moved to proper groups after discovery and not sure how to automate this process. Do I have to created an install package for every group or is there a way to automatically move new machines via subnet or hostname?
Welcome to the Endpoint Protection: Application Control user forum.
Please post your questions about Application Control here.
Welcome to the Endpoint Protection: Application Isolation user forum.
Please post your questions about Application Isolation here.
Attached screenshot is the scan result in excel, with system/file info removed.
The result is so confusing.
Some files had risk but were not infected, so they were left alone?
Some files were Cleaned by Deletion, but he file name were "SUMMARIZED DATA"?
Can some explain the result to me? Was/is there really virus in my computer? Was any file really deleted?
Hello everyone,
I have a GUP that's not getting updates to the virus definitions from the server. While I'm waiting for the real issue to get resolved, I was wondering if I could find a workaround to get the group clients updated. Rather than updating each client manually I'm hoping that I can update the GUP manually and have the clients get their updates as usual.
Is it possible to manually update client definitions in the GUP host and then to copy those into GUP definitions?
Where are GUP definitions located for version 14? It seems they are no longer in *\SharedUpdates.
Is it possible to copy GUP definitions from one GUP to another?
Is there some other way to accomplish what I'm looking for?
Thanks in advance
Hi,
We are creating a new location for the VPN users. But there is no option for the Fortinet Client adapter while adding the new location. Any suggestions, how I can create a new location for the VPN Users.
SEPM Version: 14.2
SEP Client : 14.2
Regards
Sharma
Hi
I would like a solution to fix my problem about LINUX clients. My LINUX clients are RHEL 7.5 after I installed status auto protect is malfunctioning. This package install is SEP 14.2 MP1. Symantec Endpoint Protection Manager is version 14.2 MP0.
My LINUX client can update definition via Symantec protection manager. Last schedule sacn status is running on schedule plan but auto protect status is malfunctioning.
I found log install is
" Pre-compiled Auto-Protect kernel modules are not loaded yet, need compile them from source code
Build Auto-Protect kernel modules from source code failed with error: 1
Running LiveUpdate to get the latest defintions...
sep::lux::Cseplux: Failed to run session, error code: 0x80010780
Error 11: Resource temporarily unavailable
Live update session may be already in progress, could not aquire session lock.
Unable to perform update
Installation completed "
thank you for your support.
Hi,
We have a multiple offices in one regions but unable to cover all offices through GUPs. Currently all these machines are reporting to one group. I have createa a LU policy with multiple GUPs in it. Please confirm if this policy can help and provides the updates to offices where GUP details in this policies.
We get the error "You have already requested for license activation" when I try to add a Subscription Serial number to SEP 15 (Product Activation Area).
I was able to earlier successfully activate another subscripotion serial number and deploy SEP client to local machines.
But I need to use the extra licenses we purchased to add more machines to our SEP 15 Domain.
Is there any suggestion as to who can help??
Thanks
Charles
Hi All,
I'm wondering if there's a way to add mutiple MD5 hashes at once to an Application Control Rule Set. Or do they have to be added one at a time by chosing "Add" and going through the steps for each one?
Hii,
Difference between SEP version 14x & 15x
What are the new features available 15x
Anybody implemented 15x?
Please review about 15x
Hi Support,
I need one HI Script to check the SEP client is login with AD ID or Not and popup message for the same.
Please help for the same.
Thansk
Hi
I have newly upgraded my Symantec Entpoint Protection 12.1 4013.4013 to 14.2.1031.0100 on windows Server 2008 R2,
I had a customized rule which allows a third party software access a specific IP number(for a timestamp device) on my local LAN, By the instance I did upgraded the symantec to the newest version, I saw that my customized rule have no effect any more, I did lots of searches about the issue in Internet and got nothing.
The interesting point is when I go into the "Configure Firewall Rules" and make any irrelevant changes on any rule by doing ethir enableing or disabling it and then click on ok button to apply the change, unexpectedly I see my customized rule now has effect and the software has it's connectivity back to the IP number just like everything goes normal as it was on the previous version of symantec endpoint 12.1 4013.4013.
any suggestion is welcome by pleaser
I appreciate for supportive replies :-)
Hi,
i have a question , we use SEP and manage with SEPM , my question is : when open the SEP from client SEP ask Password we set and then type it, but when SEP is open we cant changes things like Expection list (local admin can do it ) but we need admin mode when we use public or domian user , how can do it ??
(sry for my bad english )
symentec log is consuming high space.How can i reduce the consuption please suggest me
16K symantec/sep/sent
2.3G symantec/sep/Logs
388K symantec/sep
4.0K symantec
4.0K tmp/yum-smalkedi-4JS6bu
8.0K tmp/.oracle
152K tmp
4.0K yp
- Dear All I observed weird strings appeared in a DLL module loaded by the ccSvcHst.exe "Symantec Process" in memory
- During analysis of this DLL module I found a string pointing to a rasomeware domain on onion network
- First I suspected it could be related to virus definiations update, however examining this module I didn't find any other domains or strings except for this site, with my search I found its a C2 that is being used by ransomeware as a service
"http://kdvm5fd6tn6jsbwh[.]onion[.]to"
- I need some help to identify is this a legtimate symantec behaviour or its something I need to dig deeper
- I reached to symantec support and didn't get a solid reply yet
- Any feedback will be much appreciated specially I didn't spot this module on all machines in the network with symantec endpoint installed.
Hi,
I would like to install SEP14 on member server than the main production server - is it possible?
The proposed member server will be a member (same as other windows client) to the main Active Directory Server.
Thanks,
We have a problem.
There is one SEPM in our environment.SEPM runs 14.0 175 SEP
with 7 different seat licenses.
license number :
1. 175 SEP seats
2. 5 SEP seats
3. 16 SEP seats
4. 12 SEP seats
5. 2 SEP seats
6. 9 SEP seats
7. 17 SEP seats
for SEPM all seats are totaled to 236 seats.
of the 236 seats used 153 seats which means there are about 83 seats available.
Question: How to apply an empty seat from license 1 to several other licenses.
Is there a way to solve this problem?
Hi,
We have hundreds of offices with count less than 50 computers per office. This is not possible for us to place a GUP at each site. Can we use SCCM as a third party tool to devlier the AV defintions for all these offices to save network bandwidth?
Regards
Sharma