Trying  to upgrade SEP 14.2 RU1 MP1 from 14.0.3876.1100  on Windows 7 Pro

Found some error code 1603 , 1060

Thanks for help.

Hello,

did anyone ever face the problem that a risk event keeps coming up via email but the actual file has been quarantined long time ago and running a full scan does not find anything? The event seems to be stuck somewhere in the database and is not cleared.

Any ideas?

Thanks in advance.

Hello.

I've already found https://support.symantec.com/us/en/article.howto80715.html , but still have small question left.

I want to create firewall rule, which will allow specific traffic only if (local IP) and (local MAC) will match specific values.

Following mentioned article, "The hosts that you define on either side of the connection (between the source and the destination)" use OR condition, and "Selected hosts" use AND condition.

That's fine to understand if we are talking about matching only IP-addresses, for example (we take any IP from "Local" block, any IP from "Remote" block, and connect them with AND statement).

But, in my case, both my conditions (local IP and local MAC) are on the same side - does it mean, that only "OR" is possible? Any way I can connect both this rules with "AND"?

I tried to understand the Symantec Quick Licensing guide presented here https://www.symantec.com/connect/sites/default/files/SEP%20EE%20Licensing%20guide.pdf. But still have some concerns to understand the risk for the clients if the paid license expires.

1) When paid license expires in SEPM 12/14 consoles it infroms administrators in advance for 2 months. What is grace period after the license was expired?

2) If the license was expired on SEPM manager, the server will not receive updates from Symantec LiveUpdate. Is it correct or not?

3) Can the managed clients continue to receive content updates from SEPM server with expired paid license?

Hello team,

I just need to know ,how can i extract REPORTS that contains all the endpoints onboarded/reflecting on SEP Manager..?

Regards;

Hi,

Looking at our SEPM I can see alot of clients offline. I would like to configure SEPM to delete offline clients after X amount of days and I know I can do this in domain properties. My question is, when a client record is deleted from the DB, does it also delete the logs for these clients. It is an audit requirement to store logs on the DB for 365 days in our company and obviously dont want to leave my self open on this.

Any help would we be appreciated.

Thanks,

S

Hey Guys

I have the following issue: we have an environment with different virtualised clients, half of the machines are Windows 7 (64bit) and the other virtual machines are Windows 10 (64 bit). They are in the same group and use the same policies.

But every 5 minutes, the Windows 10-Clients log a connection with the SEPM in the System Protocols and the CPU spikes to about 70% for about 30 seconds and then stops. The Windows 7 Machines are fine. They're running the same version.

What can i do to troubleshoot this issue?

Thanks for your help.

Kind regards

Gabe

Hello,

we have a lot of MAC clients with SEP 14.x installed and disovered that SEP is leaving a very large log file at:

/Library/Application Support/Symantec/Silo/NFM/Daemon/output.log

In our collection of test systems, we are seeing this file taking up several gigabytes. On one system, that log file took up over 100GB.

do you know what is this file for, and where we could tweak it?
 

Thank you,

I'm testing software deployment through LogMeIn and is getting this error when I tried to run the SEP64.msi

>

Output truncated..

 Endpoint Protection -- The installer integrity check failed with error code 0x80070003. Common causes for this failure include an incomplete download, damaged media, or problems with the Trusted Root certificate store.

The installer integrity check failed with error code 0x80070003. Common causes for this failure include an incomplete download, damaged media, or problems with the Trusted Root certificate store.
Action ended 10:08:02: LaunchConditions. Return value 3.
Action ended 10:08:02: INSTALL. Return value 3.
Property(S): UpgradeCode = {F7BE9C8A-C2E6-470D-B703-0A1845E6FF8C}
Property(S): IEVERSION = 9.11.18362.0
Property(S): CLOUDMANAGED = 0
Property(S): OS_SUPPORTS_UI = C:\Windows\explorer.exe
Property(S): SYMRASMAN_REG13_PATH = C:\Windows\System32\rastls.dll
Property(S): SYMRASMAN_REG13_INTERACTIVEUIPATH = C:\Windows\System32\rastls.dll
Property(S): SYMRASMAN_REG13_CONFIGUIPATH = C:\Windows\System32\rastls.dll
Property(S): SYMRASMAN_REG13_IDENTITYPATH = C:\Windows\System32\rastls.dll
Property(S): SYMRASMAN_REG25_PATH = C:\Windows\System32\rastls.dll
Property(S): SYMRASMAN_REG25_INTERACTIVEUIPATH = C:\Windows\System32\rastls.dll
Property(S): SYMRASMAN_REG25_CONFIGUIPATH = C:\Windows\System32\rastls.dll
Property(S): SYMRASMAN_REG25_IDENTITYPATH = C:\Windows\System32\rastls.dll
Property(S): DEFENDERFOUND = Microsoft Windows Defender
Property(S): ProductName = Symantec Endpoint Protection
Property(S): ProductDisplayName = Symantec Endpoint Protection
Property(S): ProductVersion = 14.2.4815.1101
Property(S): OPTOUTREPSUBMISSION = 0
Property(S): ENABLEAUTOPROTECT = 1
Property(S): DISABLEDEFENDER = 1
Property(S): RUNLIVEUPDATE = 1
Property(S): IDCENABLE = 1
Property(S): VersionNT64 = 603
Property(S): ReducedSizeButton = 0
Property(S): SetupType = Typical
Property(S): _IsSetupTypeMin = Typical
Property(S): AgreeToLicense = No
Property(S): _IsMaintenance = Change
Property(S): RestartManagerOption = CloseRestart
Property(S): SMSName = SepMasterService
Property(S): SMSDescription = Symantec Endpoint Protection
Property(S): InUISequence = 0
Property(S): CACHE_INSTALLER = 1
Property(S): REBOOT = ReallySuppress
Property(S): System64Folder = C:\Windows\system32\
Property(S): REQUEST_LICENSE = false
Property(S): ProgramFilesFolder = C:\Program Files (x86)\
Property(S): WindowsFolder = C:\Windows\
Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
Property(S): SourceDir = C:\Windows\TEMP\LMIPKG20FE98\
Property(S): CommonAppDataFolder = C:\ProgramData\
Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(S): DesktopFolder = C:\Users\Public\Desktop\
Property(S): ALLUSERS = 1
Property(S): APPTYPE = 105
Property(S): LUMoniker = {57201BD7-52EE-4841-8368-05C54B1F44DC}
Property(S): SecurityUpdatesMoniker = {01004CAE-0A4B-0378-65D4-6282A66CD075}
Property(S): CloudAutoupgradeMoniker = {33769587-5823-4393-8BC7-82ACF5EAC8FE}
Property(S): ARPSYSTEMCOMPONENT = 1
Property(S): INSTALLLEVEL = 100
Property(S): MSIENFORCEUPGRADECOMPONENTRULES = 1
Property(S): Manufacturer = Symantec Corporation
Property(S): ProductCode = {EDDFA2FE-A36E-4C80-8060-14A2141F8882}
Property(S): ProductLanguage = 1033
Property(S): IDCDATASERVER = tses.symantec.com
Property(S): IDCDATALOC = /incoming
Property(S): IDCDEPLOYMENT = Local
Property(S): IDCEXTRAINFO = 0
Property(S): MAXMIGRATIONDELAY = 60
Property(S): MIGRATIONDELAY = 30
Property(S): MsiLogging = voicewarmupx
Property(S): MSIRESTARTMANAGERCONTROL = Disable
Property(S): SMSLongDescription = Provides malware and threat protection for Symantec Endpoint Protection
Property(S): SymMigrationRebootMessage = To provide complete protection, Symantec Endpoint Protection requires this computer to restart.
Property(S): SymRebootAtEndMessage = To provide complete protection, Symantec Endpoint Protection requires this computer to restart.
Property(S): InstallCompleteMessage = The installation has completed successfully
Property(S): ShowServiceProgressMessage = Executing install script via service
Property(S): ShowServiceProgress_RBMessage = Executing rollback script via service
Property(S): SiloGUID = {2DC5761D-FECC-4832-B9C5-67CA39DE7369}
Property(S): SILO_REGHIVE = SOFTWARE\Symantec\Symantec Endpoint Protection
Property(S): HIGHCONTRAST = 0
Property(S): SYM_MAJOR_UPGRADE = 0
Property(S): SEPLicprop = SB
Property(S): SEPLicpropReg = sepsb
Property(S): SYMLICENSETYPE = 0
Property(S): SYMLICENSETYPESTRING = sepe
Property(S): MIGLICENSETYPE = 0
Property(S): LOADEDDRIVERSFOUND = 0
Property(S): RESOLVEFEATURES = 0
Property(S): InstallingToReparse = 0
Property(S): SYMCOMPRESSFOLDERS = 1
Property(S): VMWAREDETECTED = 0
Property(S): RegSilo = HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\{2DC5761D-FECC-4832-B9C5-67CA39DE7369}
Property(S): SepmDataDir =  
Property(S): SepmInstallDir =  
Property(S): TempExportFolder = C:\Users\NS5\AppData\Local\Temp\a2d66d03-3a18-4075-b840-912cfea12508
Property(S): ValidInstallDir = 0
Property(S): CACHEINSTALL = 1
Property(S): MIGRATESETTINGS = 1
Property(S): CMC_PRODUCT_BUILD = #1101
Property(S): CMC_PRODUCT_VERSION = 14.2
Property(S): Managed_Client_Type = Unmanaged
Property(S): ADDSTARTMENUICON = 1
Property(S): SEPORSNAC = 1
Property(S): PROXY_TYPE = 1
Property(S): PROXY_SERVER =  
Property(S): PROXY_HTTP_PORT = 0
Property(S): PROXY_HTTPS_PORT = 0
Property(S): PROXY_USER = **********
Property(S): PROXY_DOMAIN = **********
Property(S): PROXY_FULL_USER = **********
Property(S): PROXY_PASSWORD = **********
Property(S): ALLOW_FALLBACK = 1
Property(S): PROXY_AUTH_TYPE = 0
Property(S): PROXY_USER_PLAIN = **********
Property(S): PROXY_PASSWORD_PLAIN = **********
Property(S): SymRasManDefine = SymRasMan
Property(S): ErrorDialog = SetupError
Property(S): ApplicationUsers = AllUsers
Property(S): DefaultUIFont = Tahoma8
Property(S): ProgressType0 = install
Property(S): ProgressType1 = Installing
Property(S): ProgressType2 = installed
Property(S): ProgressType3 = installs
Property(S): SBE_Feature_Set = Typical
Property(S): INSTALLSYMELAM = 1
Property(S): DcsPolicyName = SISIPS
Property(S): IPS_ENABLE = true
Property(S): AGENT_PORT = 443
Property(S): PROTOCOL = https
Property(S): OS_FEATURES = PD
Property(S): Charset = UTF-8
Property(S): POLLING_INTERVAL = 300
Property(S): NOTIFICATION_ENABLE = true
Property(S): NOTIFICATION_PORT = 2222
Property(S): POLICY_FALLBACK = false
Property(S): DRIVER_LOG_FILE = SISIPS.log
Property(S): DRIVER_LOG_PROFILE = SISIPSProfile.log
Property(S): AGENT_POLICY = NULL
Property(S): LibSepCommon = 1
Property(S): HITYPE = 0
Property(S): LOCATIONSENSOR = 0
Property(S): REVERSEDNS = 0
Property(S): WSCAVALERT = 1
Property(S): WSCAVUPTODATE = 7
Property(S): WSCAVUPTODATELB = 30
Property(S): WSCCONTROL = 0
Property(S): LibSep64 = 1
Property(S): SYMVERSIONNT = 1000
Property(S): SysPlantStartType = disabled
Property(S): LibSnac64 = 1
Property(S): ForeFrontSupportProp = http://service1.symantec.com/SUPPORT/ent-security....
Property(S): LaunchBrowserProp = Rundll32.Exe url.Dll,FileProtocolHandler
Property(S): Lang = 1033
Property(S): LiveUpdateVars = 1
Property(S): SecureCustomProperties = ADDLOCAL;ADDSTARTMENUICON;AGENT_NAME;AGENT_POLICY;AGENT_PORT;AGENT_SECURITY_GROUP;ALLOW_FALLBACK;ALT_MANAGEMENT_SERVERS;AMBERPLUSFOUND;AMBERSNACPLUSFOUND;APPDATAINSTALL;APPDATAINSTALLLOGS;APPDATAINSTALLSCRIPTS;APPDATALOGS;APPLOGS;APTEMP;ARPESTSIZE;AVLOGS;BADPATTS;CACHE_INSTALLER;CACHED_INSTALLS;CACHEINSTALL;CLOUDMANAGED;CMC_PRODUCT_BUILD;CMC_PRODUCT_VERSION;COMPANYNAME;CONFIGDIR;CONTENTCACHE;CONTENTMIGRATION;DARKNETWORK;DB;DECTEMP;DEFENDERFOUND;DISABLEDEFENDER;DONOTSETSYMQUALLOCALDUMPS;DOWNLOAD;DRIVER_LOG_FILE;DRIVER_LOG_PROFILE;EMBEDDEDMINFEATURES;EMBEDDEDSYSTEM;ENABLEAUTOPROTECT;EWFAPIFOUND;EWFENABLED;EWFINSTALLED;EXCHANGEFOUND;FBWFENABLED;FBWFINSTALLED;FEATURESTATEDIR;FOREFRONEXCFOUND;FOREFRONTTMGFOUND;FOUNDBROWSERPROTECTIONLITE;FOUNDLIVEUPDTHST;FOUNDSEPSLF;FOUNDSETTINGSHOSTSLIVEUPDATE;FOUNDSNACSLF;HELP;HITYPE;HOSTNAME;I2_LDVP.VDB;IDCDATALOC;IDCDATASERVER;IDCDEPLOYMENT;IDCENABLE;IDCEXTRAINFO;IDS_POLICY_FILE;IEVERSION;INSTALLEDPRODUCTTYPE;INSTALLSCRIPTS;INSTALLSYMELAM;IPS_ENABLE;JAGUARSNACPLUSFOUND;LANG1033;LEGACYSEA_NM;LEGACYSEA_NM1;LEGACYSEA_NM2;LIVEUPDATE;LOADEDDRIVERSFOUND;LOCATIONSENSOR;LOWBANDWIDTH;MANAGEMENT_SERVER;MAXMIGRATIONDELAY;MIGLICENSETYPE;MIGRATESETTINGS;MIGRATIONDELAY;MIGRATIONPENDINGREBOOT;MSIRESTARTMANAGERCONTROL;NEWERFOUND;NEWERSNACFOUND;NORTON64FOUND;NORTONAV;NORTONAVPRO;NORTONFOUND;NOTIFICATION_ENABLE;NOTIFICATION_PORT;OLDAPPDATADIR;OLDERFOUND;OLDPRODUCTCLOUDMANAGED;OLDPRODUCTDARKNETWORK;OLDPRODUCTMANAGED;OLDPRODUCTREDUCEDSIZE;OLDPRODUCTVERSION;OLDSILOFOUND;OPTOUTREPSUBMISSION;OS_FEATURES;OS_SUPPORTS_UI;OUTLOOKFOUND;PARTIALCONTENT;PARTIALUPGRADE;PENDINGMODULEREMOVAL;PERSISTEDDATA;POLICY_FALLBACK;POLLING_INTERVAL;PREAMBERFOUND;PREAMBERSNACFOUND;PREHAMLETFOUND;PRODUCTINSTALLDIR;PRODUCTINSTALLDIRINSETAID;PROTOCOL;PROXY_AUTH_TYPE;PROXY_DOMAIN;PROXY_FULL_USER;PROXY_HTTP_PORT;PROXY_HTTPS_PORT;PROXY_PASSWORD;PROXY_PASSWORD_PLAIN;PROXY_SERVER;PROXY_TYPE;PROXY_USER;PROXY_USER_PLAIN;QUARANTINE;REDUCEDSIZE;REGFILTERINSTALLED;REINSTALL;REMOVE;REQUEST_LICENSE;RES;RESOLVEFEATURES;REVERSEDNS;ROOTDRIVE;RUNLIVEUPDATE;SAVCORP7XFOUND;SAVFOUND;SAVMIGINSTDIR;SAVSMIGFOLDER;SCSMIGINSTDIR;SDIDATFOUND;SEAMIGINSTDIR;SEPMIGINSTDIR;SEPORSNAC;SERDEFDATFOUND;SILO_REGHIVE;SISFAILED;SMCLU;SNACFOUND;SNACMIGINSTDIR;SNACNPFOUND32;SNACNPFOUND64;SOURCEDIR;SPA51BLOCK;SPAFOUND;SPMXMLFOUND;STATEDIR;STATICDATA;SYLINKSRCDIR;SYM_MAJOR_UPGRADE;SYMCOMPRESSFOLDERS;SYMFORCEFAIL;SYMFORCEFAILPHASE;SYMLICENSETYPE;SYMLICENSETYPESTRING;SYMRASMAN_REG13_CONFIGUIPATH;SYMRASMAN_REG13_CONFIGUIPATHBACKUP;SYMRASMAN_REG13_IDENTITYPATH;SYMRASMAN_REG13_IDENTITYPATHBACKUP;SYMRASMAN_REG13_INTERACTIVEUIPATH;SYMRASMAN_REG13_INTERACTIVEUIPATHBACKUP;SYMRASMAN_REG13_PATH;SYMRASMAN_REG13_PATHBACKUP;SYMRASMAN_REG25_CONFIGUIPATH;SYMRASMAN_REG25_CONFIGUIPATHBACKUP;SYMRASMAN_REG25_IDENTITYPATH;SYMRASMAN_REG25_IDENTITYPATHBACKUP;SYMRASMAN_REG25_INTERACTIVEUIPATH;SYMRASMAN_REG25_INTERACTIVEUIPATHBACKUP;SYMRASMAN_REG25_PATH;SYMRASMAN_REG25_PATHBACKUP;SYMREBOOT;SYMSRCDIR;SYMSTARTMENUDIR;SYMVERSIONNT;SYSFERFOUND32;SYSFERFOUND64;TARGETDIR;TEEFERFOUND;TEEFERPENDINGREBOOT;TEEFERVISTA;TEEFERWIN8;TPAR;UNINSTALLREBOOTREQUIRED;USEDCUSTOMINSTALL;USERNAME;UWFENABLED;UWFINSTALLED;VC8B1416CHECK;VC8B42CHECK;VC8B762CHECK;VMWAREDETECTED;WINDOWSFIREWALLSTATE;WSCAVALERT;WSCAVUPTODATE;WSCAVUPTODATELB;WSCCONTROL;WSCONFONLINE;XFER;XFER_TMP
Property(S): MsiHiddenProperties = PROXY_DOMAIN;PROXY_FULL_USER;PROXY_PASSWORD;PROXY_PASSWORD_PLAIN;PROXY_USER;PROXY_USER_PLAIN
Property(S): MsiLogFileLocation = C:\Windows\TEMP\LMIPKG20FE98\msilog_D51E9D1E01D76B5F7E71BE610C3B6CB8.log
Property(S): PackageCode = {049D6CC4-C02B-4475-B87E-00F0BF468235}
Property(S): ProductState = -1
Property(S): PackagecodeChanging = 1
Property(S): CURRENTDIRECTORY = C:\Windows\TEMP\LMIPKG20FE98
Property(S): CLIENTUILEVEL = 3
Property(S): CLIENTPROCESSID = 4508
Property(S): VersionDatabase = 200
Property(S): MsiSystemRebootPending = 1
Property(S): VersionMsi = 5.00
Property(S): VersionNT = 603
Property(S): WindowsBuild = 9600
Property(S): ServicePackLevel = 0
Property(S): ServicePackLevelMinor = 0
Property(S): MsiNTProductType = 1
Property(S): WindowsVolume = C:\
Property(S): SystemFolder = C:\Windows\SysWOW64\
Property(S): RemoteAdminTS = 1
Property(S): TempFolder = C:\Users\NS5\AppData\Local\Temp\
Property(S): ProgramFiles64Folder = C:\Program Files\
Property(S): CommonFiles64Folder = C:\Program Files\Common Files\
Property(S): AppDataFolder = C:\Users\NS5\AppData\Roaming\
Property(S): FavoritesFolder = C:\Users\NS5\Favorites\
Property(S): NetHoodFolder = C:\Users\NS5\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(S): PersonalFolder = C:\Users\NS5\Documents\
Property(S): PrintHoodFolder = C:\Users\NS5\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(S): RecentFolder = C:\Users\NS5\AppData\Roaming\Microsoft\Windows\Recent\
Property(S): SendToFolder = C:\Users\NS5\AppData\Roaming\Microsoft\Windows\SendTo\
Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(S): LocalAppDataFolder = C:\Users\NS5\AppData\Local\
Property(S): MyPicturesFolder = C:\Users\NS5\Pictures\
Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(S): FontsFolder = C:\Windows\Fonts\
Property(S): GPTSupport = 1
Property(S): OLEAdvtSupport = 1
Property(S): ShellAdvtSupport = 1
Property(S): MsiAMD64 = 6
Property(S): Msix64 = 6
Property(S): Intel = 6
Property(S): PhysicalMemory = 1808
Property(S): VirtualMemory = 1433
Property(S): AdminUser = 1
Property(S): MsiTrueAdminUser = 1
Property(S): LogonUser = NS5
Property(S): UserSID = S-1-5-21-1716720655-350785297-3160252546-1001
Property(S): UserLanguageID = 1033
Property(S): ComputerName = RMS-TEST
Property(S): SystemLanguageID = 1033
Property(S): ScreenX = 1024
Property(S): ScreenY = 768
Property(S): CaptionHeight = 19
Property(S): BorderTop = 1
Property(S): BorderSide = 1
Property(S): TextHeight = 16
Property(S): TextInternalLeading = 3
Property(S): ColorBits = 32
Property(S): TTCSupport = 1
Property(S): Time = 10:08:02
Property(S): Date = 11/2/2019
Property(S): MsiNetAssemblySupport = 4.8.3752.0
Property(S): MsiWin32AssemblySupport = 6.3.18362.1
Property(S): RedirectedDllSupport = 2
Property(S): MsiRunningElevated = 1
Property(S): Privileged = 1
Property(S): USERNAME = NS5
Property(S): DATABASE = C:\Windows\Installer\210dda.msi
Property(S): OriginalDatabase = C:\Windows\TEMP\LMIPKG20FE98\Sep64.msi
Property(S): UILevel = 2
Property(S): ACTION = INSTALL
Property(S): BFEServiceRunning = 1
Property(S): Supports32BitDlls = 1
Property(S): SYMVERSIONNT64 = 1000
Property(S): IdcXmlPath = C:\Windows\Temp\idc.xml
Property(S): PackageIntegrityError = 80070003
Property(S): EMBEDDEDSYSTEM = 0
Property(S): AlreadyElevated = 1
MSI (s) (E0:94) [10:08:02:935]: Note: 1: 1708 
MSI (s) (E0:94) [10:08:02:935]: Product: Symantec Endpoint Protection -- Installation operation failed.

MSI (s) (E0:94) [10:08:02:935]: Windows Installer installed the product. Product Name: Symantec Endpoint Protection. Product Version: 14.2.4815.1101. Product Language: 1033. Manufacturer: Symantec Corporation. Installation success or error status: 1603.

MSI (s) (E0:94) [10:08:02:951]: Deferring clean up of packages/files, if any exist
MSI (s) (E0:94) [10:08:02:951]: MainEngineThread is returning 1603
MSI (s) (E0:C0) [10:08:02:951]: No System Restore sequence number for this installation.
=== Logging stopped: 11/2/2019  10:08:02 ===
MSI (s) (E0:C0) [10:08:02:951]: User policy value 'DisableRollback' is 0
MSI (s) (E0:C0) [10:08:02:951]: Machine policy value 'DisableRollback' is 0
MSI (s) (E0:C0) [10:08:02:951]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (E0:C0) [10:08:02:951]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 
MSI (s) (E0:C0) [10:08:02:966]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 
MSI (s) (E0:C0) [10:08:02:966]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (s) (E0:C0) [10:08:02:966]: Destroying RemoteAPI object.
MSI (s) (E0:CC) [10:08:02:966]: Custom Action Manager thread ending.
MSI (c) (9C:08) [10:08:02:966]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (c) (9C:08) [10:08:02:966]: MainEngineThread is returning 1603
=== Verbose logging stopped: 11/2/2019  10:08:02 ===

hi everyone

under sepm>policy>virus and spyware protection policy>miscellnious>notifications

i can get the end user to get a message after x amount of days that the definitions are out of date

but i can only get the message to appear once every reboot, not after. is there a way to get the messae to "annoy" the end user to take action? say a few times a day?

thank you

Hey Guys

I have the following issue: we have an environment with different virtualised clients, half of the machines are Windows 7 (64bit) and the other virtual machines are Windows 10 (64 bit). They are in the same group and use the same policies.

But every 5 minutes, the Windows 10-Clients log a connection with the SEPM in the System Protocols and the CPU spikes to about 70% for about 30 seconds and then stops. The Windows 7 Machines are fine. They're running the same version.

What can i do to troubleshoot this issue?

Thanks for your help.

Kind regards

Gabe

Hello,

we have a lot of MAC clients with SEP 14.x installed and disovered that SEP is leaving a very large log file at:

/Library/Application Support/Symantec/Silo/NFM/Daemon/output.log

In our collection of test systems, we are seeing this file taking up several gigabytes. On one system, that log file took up over 100GB.

do you know what is this file for, and where we could tweak it?
 

Thank you,

Hello Team,

I need to get the clear meaning of "DISABLED" and "Offline". endpoints on SEP manager.

How can i exaplain in techncal manner...?

Hello All,

We're still seeing the issue described in this post:  https://www.symantec.com/connect/forums/windows-security-center-shows-status-unavailable-wsep-142?ts=1573500650

... but the post was marked as resolved and closed?

The issue:

Windows Defender Security Center - Virus & Threat Protection - Current Threats/Protection Settings/Protection Updates - all show "Status Unavailable"

Environment:

Windows 10 Enterprise - Version 10.0.17763  Build 17763

Symantec Endpoint Protection - Version 14.2.3335.1000 Build 3335

Suggestions?

How to check if firewall is enabled/disabled on a local machine in SEP. Is there a report in SEP which could provide us with the list of machine names for which the firewall is enabled or disabled?

Sep15 console - Sep14.2 clients.

Out of the blue... I had 1 client starting to report this every 1/2 hour... a complete uninstall/reinstall seemed to have fixed this.

now unexpectingly -- 6 more clients today started reporting this every 1/2 hour.  I performed a repair on each one, and rebooted, but it didn't seem to fix it.

I'll uninstall/re-install the sep client, if I have to on these 6 clients, but I would rather not -- very time consuming -- and I'm afraid more clients might start reporting the same thing.

any ideas?

This is what is reported from the client to the cloud manager in "other events"

"Failed to send statuses of the commands to the server. error code 404, HTTP category"

Hello,

Im trying to understand what exacally does the SEP14 Outlook plug-in do? If the plug-in was disabled wouldnt SEP running on the workstation pickup a virus, ect..? What specificall does the plug-in do that SEP on the workstation is not doing. Official Symantec document explaining would be great. Thank you

HI, I have a client using this Symantec endpoint protection, and they need to renew license. and this year we are need more license for new devices

example : last year we only have 10 devices and this year devices is 30, what license that suitable for this case.  Is it need to buy new license or renew? 

Need to know how install SEP and SEPM on same server and made them communicate with each other. I have already setup sepm on my computer. Basically I wanted to do this so that I can test and push policy without having two different computers I am new to Symantec so basically wanna setup a lab like thing. Kindly help me with this.....

Dear,

I have 2 SEPM, version 12.1.6. I want to turn off one of them and delete. The SEPM infrastructure only have load balancing.

At the end, I want only have one SEPM server. I have searched information about this activitites, however I haven´t found nothing.

Please need information or an article that It help me.

Thanks you for your help.

Regards