Quantcast
Channel: Symantec Connect - Endpoint Protection - Discussions
Viewing all articles
Browse latest Browse all 10484

Endpoint does not appear in SEPM

$
0
0
I need a solution

Hi,

the customer has SEPM 14.0.1904.0000 running on a Win 2008R2 server (also a DC). The clients are SEP 14.0.1904.0000 or 14.0.3752. 6 months ago a junior computer guy used an image to set up two new machines, without preparing the image properly. So I am pretty sure the two new machines ended up with identical SEP hardware ID. They only appeared in SEPM one at a time. This problem was never solved, for lack of interest at the customer. Lets call the two machines E and U.

Yesterday I was at the customer and now none of the two machines were visible in SEPM. I removed SEP from U, downloaded newest SEP (version 14.2.770.0000) and installed it, and read the communication file into it so that it should know how to find SEPM. Hoping that this would change the hardware ID. The machine is Win10 april 2018. Now E (the other Win10 machine) appeared correctly in SNMP. However still no sign of U. The SEP should be compatible with the Win10, according to https://support.symantec.com/en_US/article.TECH235706.html

I ran cmd as admin and ran RepairClonedImage.exe -v. It said it finished successfully. However, the client still does not appear in SEPM. https://support.symantec.com/en_US/article.TECH163349.html

Ping works, and I do not think it is a network issue. I activated the apache access log, https://support.symantec.com/en_US/article.HOWTO80741.html. This is how it typically looks like:

192.168.10.50 - - [07/Sep/2018:18:01:54 +0200] "POST /secars/secars.dll?h=082962A18F61CD85B5D1...A4AECFB4BE2C20FD HTTP/1.1" 200 - "-""-"
192.168.10.154 - - [07/Sep/2018:17:40:07 +0200] "POST /secreg/secreg.dll?l=2 HTTP/1.1" 500 531 "-""Sylink"

.50 is one of the good machines, that is visible in SEPM. .154 is the machine that is not visible. For the good machine there is secars, and a really long number (my abbreviation with ... dots). For the bad machine there is secreg and no long number.

Is there a way to display the hardware ID on a SEP? So that I can check if the two machines U and E have identical hardware ID.

Does a reinstall of the SEP change the hardware ID?

Could it be a problem that a machine has the newest SEP, while the SEPM server is an older version? Could it be a problem with the latest SEP?

How to interpret the Apache log?

Any other insights as to how to fix this?

Grateful for all insights.

0

Viewing all articles
Browse latest Browse all 10484

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>