LiveUpdate Administrator

March 25, 2019, 12:14 pm

≫ Next: SEPM 12.16. MP10 File

≪ Previous: Symantec Endpoint Protection Status -- Disabled Endpoints

I do not need a solution (just sharing information)

How do I add LU to security advisory subscription when I cant find the product to add?

↧

SEPM 12.16. MP10 File

March 26, 2019, 1:11 am

≫ Next: LiveUpdate Administrator

≪ Previous: LiveUpdate Administrator

I need a solution

I want to upgrade the SEPM from 12.1.3 to 12.1.6 MP10

When I tried to get the file by using my serial number I can get only V12.1.6 MP6 Where as for 12.1.6 MP10 I am getting Clinet only patches. How to proceed this upgrade

↧

LiveUpdate Administrator

March 26, 2019, 4:51 am

≫ Next: Not all clients are updating

≪ Previous: SEPM 12.16. MP10 File

I need a solution

How do I add LU to security advisory subscription when I cant find the product to add?

↧

Not all clients are updating

March 26, 2019, 8:40 am

≫ Next: Como eliminar las excepciones creadas por clientes desde SEPM

≪ Previous: LiveUpdate Administrator

I need a solution

I have several clients that no longer update. They show as connected to SEPM. SEPM shows that all cleints have completed the "Update Content" command. I can see on the client list that they have not updated and verfy it by phyicall checking each machine. When running SymDiag on a failed client the client will update as they should so I do not see any error messages. This also happened last month and I got around it by deleting the clients and pushing the package back out to them. This worked for 3 weeks and now I have the same problem.

↧

Como eliminar las excepciones creadas por clientes desde SEPM

March 26, 2019, 11:34 am

≫ Next: default "Allow VPN" firewall rule

≪ Previous: Not all clients are updating

I need a solution

Hola buenas

Estoy implementando SEPM en mi empresa y todo perfecto. El problema es que por error deje abierta la politica de excepciones para algunos usuarios. Me gustaría poder saber que excepciones han creado los usuarios y como revertirlas, pero no consigo saber como. Hay alguna manera?

Un saludo y gracias

I am implementing SEPM in my company and everything is perfect. The problem is that by mistake leave the policy of exceptions open for some users. I would like to know what exceptions users have created and how to reverse them, but I can not find out how. Is there any way?

↧

default "Allow VPN" firewall rule

March 26, 2019, 3:51 pm

≫ Next: elevated priviliges error while repaoring SEP

≪ Previous: Como eliminar las excepciones creadas por clientes desde SEPM

I need a solution

Environment: Windows 7 Profesional SP1 64-bit, SEP 14.2 MP1 (14.2.1031.0100) UNMANAGED Client

Problem: Note - this is happening on UNMANAGED clients that have no way to connect to the SEPM and never will.

It appears that most traffic on our UNMANAGED client(s) is taking the default "allow VPN" firewall rule and are bypassing our custom firewall rules that have been in place for years. We upgraded to 14.x from 12.1 by running the executable downloaded from fileconnect. The upgrade process carried our firewall rules forward to 14.x.

We do not use VPN in our environment. Is there a workaround or a fix for this issue?

We've already done basic troubleshooting on the clients. They are working fine.

Do not offer "run cleanwipe and do a fresh install" as a solution. We are looking for either a fix or workaround or perhaps a setting in 14.2. MP1.

Thanks,

Wally

↧

elevated priviliges error while repaoring SEP

March 27, 2019, 12:11 am

≫ Next: Time Stamp - When Move Host between groups

≪ Previous: default "Allow VPN" firewall rule

I need a solution

In one of the user system, while repairing SEP we are getting the "Symantec Endpoint Protection requires elevated privileges in order to install, please login as Administrator or contact network administrator."

I have logged in user system with administrator and tried but getting same error.

Thanks

↧

Time Stamp - When Move Host between groups

March 27, 2019, 4:06 am

≫ Next: Como eliminar las excepciones creadas por clientes desde SEPM

≪ Previous: elevated priviliges error while repaoring SEP

I need a solution

Hi,

Can any one help me to get out the below situation.

One of the team member move one host name from one group (suppose group A) to another group (group B). Now i want to check the exact date and time of this event when group has been changed from group A to group B. Is there any logs?

↧

Como eliminar las excepciones creadas por clientes desde SEPM

March 27, 2019, 4:42 am

≫ Next: SQL DB

≪ Previous: Time Stamp - When Move Host between groups

I need a solution

Hola buenas

Un saludo y gracias

↧

SQL DB

March 27, 2019, 6:03 am

≫ Next: Linux servers in SEPM Status Logs show - Not Installed, No Status Reported & Unavailable

≪ Previous: Como eliminar las excepciones creadas por clientes desde SEPM

I need a solution

Can someone help me with SQL user permissions for SEPM DB..? I couldn't find relevant article like what privileges required (public, dbowner etc)

↧

Linux servers in SEPM Status Logs show - Not Installed, No Status Reported & Unavailable

March 27, 2019, 8:16 am

≫ Next: Mac OS Compatibility - SEPM 14.0.1

≪ Previous: SQL DB

I need a solution

Hello,

We have a SEPM (Symantec Endpoint Protection Manager) version - 14.2.1031.0100 configured for a customer.

This environment has both Windows and Linux servers on which Symantec AV is installed and configured.

No issues are being faced for Windows, but we are facing Reporting challenges for LINUX (RHEL) Servers.

1) The customer has access to the SEPM and can see the reports by himself.

In one of the "Computer Status Logs" Report, the customer says that "only Auto Protect is seen Enabled and rest all are seen as - Not Installed, No Status Reported & Unavailable. Does this mean that the Anti virus which has been installed on LINUX servers are incomplete?"

Even though, on Linux server Auto-Protect is Enabled, then reporting for only Auto-Protect should be shown.

The other options should either be -> Greyed-Out OR should be marked as hyphen OR should have NAwritten. This will make sure that the other options are NOT available for LINUX and thus our customer will not think on it much.

2) Is there any option for HIPS report in Symantec where it will show the exact date and time for any activity seen and blocked by HIPS.

(screenshot of exact issue, has been attached for your assistance)

Requesting your actions on this.

Regards,

Sudarshan

↧

Mac OS Compatibility - SEPM 14.0.1

March 27, 2019, 11:50 am

≫ Next: SEP 14.2 doesn't recognize ethernet adapter

≪ Previous: Linux servers in SEPM Status Logs show - Not Installed, No Status Reported & Unavailable

I need a solution

Dear,

In reference to this KB https://support.symantec.com/en_US/article.TECH131045.html the version 14.0.1 is not compatible with Mojave (10.14) and my environment some mac have installed the mojave version.

In this case , is possible to install the sep client ? what feature are not available for this issue?

↧

SEP 14.2 doesn't recognize ethernet adapter

March 27, 2019, 11:55 am

≫ Next: SEP 14

≪ Previous: Mac OS Compatibility - SEPM 14.0.1

I need a solution

Environment: Windows 7 Professional 64-bit, SEP 14.2 MP1 on UNMANAGED client(s)

Issue: It appears that SEP 14.2 incorrectly identifies our hardware ethernet connection as a VPN connection. We see traffic flowing through the Allow VPN firewall rule even though there is no VPN on the UNMANAGED client(s). These clients have no access to the SEPM

Any ideas?

↧

SEP 14

March 28, 2019, 1:47 am

≫ Next: Deployment Package for MacOS - Best Practice

≪ Previous: SEP 14.2 doesn't recognize ethernet adapter

I need a solution

Before installing Symantec MSI on new PCs (no present in SEPM) , the preferredGroup in the Sylink file is changed. Once installed, the SEP client stays always in the default group.
I can't find why this is happening. Checking the registry keys for Sylink, current group is defualt group and preferred group is the group I configured.

Having over 30000 Clients and many Groups, the only way to get the Clients in the right place, is editing the Sylink.xml before Installation.

It is only happening 14.2. It was not happening with 14.0 MSI

↧

Deployment Package for MacOS - Best Practice

March 28, 2019, 7:49 am

≫ Next: file reputation lookup alert

≪ Previous: SEP 14

I need a solution

Dear,

Only its possible to create a deployment package when I can select "Install feature Set" or "Install Setting" for Windows? for mac OS the only way is after the sep client is installed in the macOS I have to run the SylinkDrop for mac to assign to the current OU?

The best way is create a OU in the Active directory and later add the setting for the sepm console?

There is another consideration for mac computer and SEPM?

↧

file reputation lookup alert

March 28, 2019, 8:31 am

≫ Next: SEP Administration Task Querry

≪ Previous: Deployment Package for MacOS - Best Practice

I need a solution

I have SEP 14.0.2349.0100 running on 2012 windows servers. Every day I get a notice from at least one of the servers stating "Reputation check for unproven files failed because of network errors for the last 3 days."

I am sitting behind a proxy server, but I found this website (https://support.symantec.com/en_US/article.TECH162...) that lists all the exclusion addresses. I added https://*symantec.com to my proxy's exclusion list so that should cover all of them, but I'm still getting the message. The clients have internet connectivity just fine. Everything else (virus defs, etc) update just fine. Any ideas?

↧

SEP Administration Task Querry

March 29, 2019, 12:43 am

≫ Next: SEP 15 Questions

≪ Previous: file reputation lookup alert

I do not need a solution (just sharing information)

Hi All,

Ineed your help regarding following queery.

Can anyone let me know what are the daily administration task of SEP manager?

How to respond an administration if one or two computer infected with virus inside network? what is the best strategice or proactive and reactive plan for threat remediation for admins?

Please share any Demo document and your valuable suggestion on that.

↧

SEP 15 Questions

March 28, 2019, 7:37 pm

≫ Next: Symantec endpoint protection status auto protect showing malfunctioning

≪ Previous: SEP Administration Task Querry

I do not need a solution (just sharing information)

Hi All,

I have some questions:

1. What is your recommendation, if SEP On-prem users want to upgrade SEP 15, hybrid (cloud console) or cloud-only? The condition is that users meet the requirement of SEP 15.

2. Are there some major benefits when SEPM On-prem users try to use SEP 15 as hybrid mode (cloud console)? The condition is when users do not meet every requirement of SEP 15 (One of the examples, SEP 15 does not support Linux clients yet, but the On-prem admin has some Linux clients).

Wrapping up for Q2, please let me know which mode is better when I do not meet every requirement of SEP 15, hybrid (cloud console connected with SEP On-prem) or On-prem only?

Thanks.

↧