Quantcast
Channel: Symantec Connect - Endpoint Protection - Discussions
Viewing all 10484 articles
Browse latest View live

SEPM 14.2 RU1 MP1 (14.2.4814.1101) with Client 12.1 RU6 MP10 (12.1.6.10)

$
0
0
I need a solution

Hello,

I have an older Server 2003 box that we will be retiring in the next few months, but in the meantime, we are planning to upgrade our SEPM to the newest version, 14.2 RU1 MP1 (14.2.4814.1101).

I see the newest version Server 2003 R2 SP! will run is SEP 12.1 RU6 MP10 (12.1.6.10).

I am trying to determine if the newest version of SEPM will be able to manage the SEP 12.1 RU6 MP10 (12.1.6.10) client.

I saw some reference here https://support.symantec.com/us/en/article.HOWTO125357.html#v118868056 stating that with SEPM 14.2, clients with 14.0.1 MP2 DO NOT download security patches from SEPM (attached image). Can someone clarify what that means to me in my situation above?

If there are any other considerations, considering all of the recent upgrade issues with Windows 7, please let m eknow as well.

Thanks!

0

How to block Windows scripts host (WSH)

$
0
0
I need a solution

Hello evryone, Can anyone please tell me how can I block Windows scripts host (WSH) with application control? Appreciate if you can please share the steps. Thanks

0

Directory Server authentication fails on 14.2 MP1 Build 1031

$
0
0
I need a solution

Hello All,

We have been having issues with Authentication and per Symantec that is known issue so we followed the below document available on Symantec Support as well as have raised CASE with Symantec Support.

https://support.symantec.com/us/en/article.tech251819.html

But still, we are having the same issue, some of my team members can able to log in while others are not on the same SEPM console, can anyone help me to get this issue resolved.

Have added complete FQDN on LDAP server also tried adding specific DC server also did changes in registry mentioned in doc but still same issue on all SEPM servers we have.

SEPM Version: 14.2 MP1 Build 1031

OS: Windows Server 2012 R2 Standard.

Also, there is no positive response from Support have CASE raised for more than 2 weeks now, hoping to get help from the community.

Thanks & Regards,

Pratik Pashte

0

How to export events by REST API in Endpoint Protection 14

$
0
0
I need a solution

Hi guys,

Do you know how to export events by REST API in Endpoint Protection Manager 14 ? 

I checked the REST API document for SEPM14. It looks like I can only find this one:

GET /api/v1/events/critical,

Is this only used to export critical events?  Or do we have other REST API to export general evets.

0

SEP 14.2 License

$
0
0
I need a solution

Hi,

I got a license for 800 stations.

Now I installed more machines and I got an error of about 3 over licenses.

can I know which stations are out of license?

0

SEP 14.0 - New clients; Windows smart card drivers blocked

$
0
0
I need a solution

Greetings,

We have SEP 14.0 and have added several new machines and added the SEP client.  We are not able to use the smart cards on these machines because Windows cannot see the drivers.  This article (https://support.symantec.com/us/en/article.TECH251500.html doesn't help because we don't use App Control in our environment and when looking in T-shoot>Versions it doesn't even list Application Control Data. 

I have tried to run LU, even though this content apparently doesn't get added till 14.2

I have pushed content to the machines from SEPM

Can someone point me in the right direction?

Thank you.

0

Confusion with SEPM 14.2 upgrade

$
0
0
I need a solution

Hello guys,

 

I'm trying to upgrade Symantec_Endpoint_Protection_Manager_14.2_RU1(3335) to Symantec_Endpoint_Protection_Manager_14.2.1_MP1(4814) but there is an error that I need to stop some SEPM process.

I've stopped all process and servicess that Administrator account can stop including Symantec Endpoint Protection Manager service but still have this error.

Please see screenshot.

I need your help.

 

 

0

Change SEPM SemSvc.exe from system account to service account

$
0
0
I need a solution

Hi,

I am looking to know if the SemSvc.exe service run by the SEPM server can be run under a service account rather than the local system account?

If so, what permissions/settings need to be set for the service account?

Thanks

0

Extended virus scanner via hMailServer

$
0
0
I need a solution

Hi All,

We're using hMailServer and Symantec Endpoint Protection.  These 2 runs on Windows Server 2012 R2.

I tried to use External virus scanner in hMail Server but I always got an error regarding Return Value. 

Please see image link:

https://imgur.com/a/tjaaykR

 

Thank you

 

0

SEP 14.2 MP1 (14.2.1057.0103) Doesn't install in Windows Server 2008 SP2 32-bit

$
0
0
I need a solution

I've been trying to figure out how to install the latest build for SEP14.2 MP1 which is build 1057(SEP 14.2 MP1 (14.2.1057.0103) )

Unfortunately it doesn't install and having an error "Error 1920. Service Symantec ENdpoint Protection(SepMasterService) failed to start. Verify that you have sufficient privileges to start system services." Build 1057 installs smoothly to other OS such as Windows 7 32/64bit Server 2008 SP1 R2 64bit.

Cas has already been filed with case number 30352641.

Kindly advise,

thanks and Regards,

0

API to use in Asp.Net application to scan file before uploading

$
0
0
I do not need a solution (just sharing information)

Hi,

I am looking for a API for SEP to scan a file in c# application before uploading.

0

Rest API internal error from request

$
0
0
I need a solution

Hello, I need help with figure out my problem. 

Every time when I try to communicate via rest api to SEPM, I have respone in html form with message: "The request resulted in an internal error."

Script in powershell:

[System.Net.ServicePointManager]::ServerCertificateValidationCallback = { $True }
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

$credentails = Get-Credential -UserName "UserName" -Message "Message"
$cred= @{
username = $credentails.UserName
password = $credentails.Password
domain = ""
}
#converts $cred array to json to send to the SEPM
$auth = $cred | ConvertTo-Json
$Authnet = Invoke-RestMethod -Uri https://SEP_ADD:SEP_PORT/console/apps/sepm/api/v1/... -Method Post -Body $auth -ContentType "application/json"
$access_token = $Authnet.Token

#format HTTP header
$header = @{Authorization='Bearer '+$access_token}

#Lists All groups
Invoke-RestMethod -Method Get -Uri https://SEP_ADD:SEP_PORT/console/apps/sepm/api/v1/... -Headers $header

---------------

Variable $access_token is empty because $Authnet have only error message. Certificate trusted. Somewhere I saw similiar problem, and the solution probably was changing something in administrator lockout account policies, but it is really possible that was solution?

Any ideas?

0

SEPM 14.2 upgrade confusion

$
0
0
I need a solution

Hello everyone,

I'm just trying to upgrade Symantec_Endpoint_Protection_14.2_RU1(3335) to Symantec_Endpoint_Protection_14.2.1_MP1(4814) but it's so hard.

I've stopped all services that Admin account can stop including Symantec Endpoint Protection Manager service but stll can't upgrade because I have an error that SEPM has to be stopped.

Please see screenshot.

To be honest I'm very frustrated with such a problematic upgrade procedure.

Please help me.

0

Error 25010 During Installation of V14

$
0
0
I need a solution

Gents,

I'm encountering an issue when trying to install SEP 14.2 RU1. Below is a screen shot of the error message and here is the actual text.

Error 25010, Could not locate "Microsoft Test Root Authority" certificate in "Trusted Root Certification Authorities" store. It is required for this build of Symantec Endpoint Protection. Please install it and retry Symantec Endpoint Protection installation.

0

Download Protection Definitions - Out of Date

$
0
0
I need a solution

Dear,

For any reason some endpoint dont update for the manager and to fix this download the definitions of AV,IPS and SONAR from https://www.symantec.com/security_response/definitions.jsp?pid=sep14  all component update OK but the Download Protecction Definitions still out date.

Its possible to download this definitions?

My version is 14 RU1 in the manager and clients

0

SEP Manage Windows Firewall

$
0
0
I do not need a solution (just sharing information)

So we're trying to make it so SEP will manage the Windows firewall in the Windows security center. More or less so we don't have two firewalls running on the machines of the organization . See attached; it gives the icon a red "X," and clicking to open SEP does nothing. As far as the SEP console looks, everything is fine. And while it's running okay, we just don't want to deploy it like this and have users think something is wrong.

This is my machine with SEP 14.2.1 and Windows 10 1903. Any fixes?

0

How to replace self signed console certificates with 3rd party

$
0
0
I need a solution

Hi,

Looking for some help how i can replace the SEPM consoles selfsigned certificates with a 3rd party certificate.

I cant seem to find many guides which are easy to follow.

Thanks.

0

UAC issue with 14.2.4814.1101 on Win 10 PC

$
0
0
I need a solution

Hi all,

I have been slowly pushing out 14.2.4814.1101 to our machines.  Most are Win 7 and a few are running Win 10.  I have experienced no issues until yesterday.   We have one PC running Win 10 Pro 1903 with the Hyper-V feature enabled.  The PC is running one Win 2012 Server VM which is the SEP Management console.  The host machine was running 14.2.4811.1100 with no issues.   When .1101 was installed and the machine rebooted, I started receiving a red User Account Control warning:

“This app mas been blocked for your protection.  An administrator has blocked you from running this app.  For more information contact the administrator   mmc.exe”

I have received the error when trying to open the Hyper-V mmc console and going into other areas that use mmc.exe such as device manager.  I tried some of the suggested solutions I found on the web with no success.  Fortunately, I use Veritas System Recovery and was able to restore the disk image before .1101 was installed.  Here are the results of some testing I have done.

  1. I uninstalled .1100 and have uninstalled .1100 using clean wipe.  A fresh install of .1101 creates the UAC issue.
  2. If I sign in with built-in Administrator account, the error disappears.
  3. I created a new user with administrative rights and the UAC error continues.
  4. When I uninstall .1101, the problem continues.  I must restore an image back to .1100.
  5. As a control test, after uninstalling .1100 I pushed out .1100 again and it installs with no UAC issues. The problem ONLY occurs when .1101 is installed clean or as an upgrade.
  6. I removed the Hyper-V feature and installed .1101.  UAC error continues.
  7. I installed a “generic” unmanaged version of .1101 and the UAC error continues.
  8. When I try to uninstall .1101 it fails and rolls back.  Clean wipe occasionally fails too.  The only trusted recovery is restoring the .1100 disk image. 

Unfortunately, restoring an image takes approx. 40 minutes, so testing has been a slow, tedious procedure.  I get one test per image restore.  I will be creating a support case but wanted to throw this out for comments or suggestions.  I certainly hope I will not have to refresh Windows and start over.   I NEVER have had an issue with this machine until .1101 was installed.  A couple of weeks ago the pc was upgraded from Win 10 1809 to 1903.  Several other machines are running 1903 and .1101 has installed with no issues.

0

Extended virus scanner via hMailServer

$
0
0
I need a solution

Hi All,

We're using hMailServer and Symantec Endpoint Protection.  These 2 runs on Windows Server 2012 R2.

I tried to use External virus scanner in hMail Server but I always got an error regarding Return Value. 

Please see image link:

https://imgur.com/a/tjaaykR

 

Thank you

 

0

SEP 14.2 MP1 (14.2.1057.0103) Doesn't install in Windows Server 2008 SP2 32-bit

$
0
0
I need a solution

I've been trying to figure out how to install the latest build for SEP14.2 MP1 which is build 1057(SEP 14.2 MP1 (14.2.1057.0103) )

Unfortunately it doesn't install and having an error "Error 1920. Service Symantec ENdpoint Protection(SepMasterService) failed to start. Verify that you have sufficient privileges to start system services." Build 1057 installs smoothly to other OS such as Windows 7 32/64bit Server 2008 SP1 R2 64bit.

Cas has already been filed with case number 30352641.

Kindly advise,

thanks and Regards,

0
Viewing all 10484 articles
Browse latest View live