Endpoint Protection

 View Only
  • 1.  12.1 MP1 - Notifications

    Posted Sep 07, 2012 07:10 AM

    Hi Everyone,

    When a risk is detected we are getting flooded with e-mail alerts. I have the damper set at 20 minutes. I usually have to delete the notification and re-create it. I thought it was because I had to acknowledge the risk, but it appears that doesn't help. I'm running 12.1 MP1. Any ideas on how to correct this?

     

    Thanks,

    Mike

     



  • 2.  RE: 12.1 MP1 - Notifications

    Posted Sep 07, 2012 07:21 AM

    There is a fix in RU1 relating to this:

     

    SEPM email notifications are sent repeatedly for old events
    Fix ID: 2681891
    Symptom: Multiple outbreak email notifications are sent during the damper period. Notifications may contain events that are older (30 days) than the triggered event.
    Solution: SQL queries were modified to filter out old events and prevent notifications during the damper period.


  • 3.  RE: 12.1 MP1 - Notifications

    Posted Sep 07, 2012 07:26 AM

    Thanks for the reply. However, we are running RU1 - 12.1 RU1 MP1. I should have been more clear. This issue is still happening.



  • 4.  RE: 12.1 MP1 - Notifications

    Trusted Advisor
    Posted Sep 07, 2012 07:31 AM

    Hello,

    Are you using a SQL database? Is this a Fresh Install of SEP 12.1 RU1 MP1 or Migrated from an older version?

    If migrated, from which version was the SEPM migrated?

    Symantec is aware about this issue. The Issue seems to have been resolved in the Upcoming Version of SEP 12.1 RU2.

    Check this Article:

    Single risk event notifications generate duplicate emails once every three minutes.

    http://www.symantec.com/docs/TECH190349

    I would request you to create a case with the Symantec Technical Support on the same.

    QuickStart Guide - Create and Manage Support Cases in SymWISE

    http://www.symantec.com/docs/HOWTO31132

    How to update a support case and upload diagnostic files with MySupport

    http://www.symantec.com/docs/TECH71023

    OR

    To Call Symantec Technical Support :

    http://www.symantec.com/business/support/assistance_care.jsp

    http://www.symantec.com/enterprise/support/contact_techsupp_static.jsp

    Hope that helps!!



  • 5.  RE: 12.1 MP1 - Notifications
    Best Answer

    Posted Sep 07, 2012 07:31 AM

    hi,

    Symantec is aware about this issue. The Issue seems to have been resolved in the Upcoming Version of SEP 12.1 RU2

     
    Check this thread
     


  • 6.  RE: 12.1 MP1 - Notifications

    Posted Sep 07, 2012 08:10 AM

    We are using the embedded database, it is a fresh install on a new 2008 R2 VM. We migrated our clients from an older 12.1 RU1 MP1 install on a phyiscal server that has been upgraded over time from 11.x to 12.1. I'll hold out until RU2 comes out. Is there an ETA?

     

    Thanks,

    Mike



  • 7.  RE: 12.1 MP1 - Notifications

    Broadcom Employee
    Posted Sep 07, 2012 08:20 AM

    Hi,

    As weevil stated it was known issue and fixed in RU1.

    However you are facing issue with MP1 & I would suggest log a case with support.

    How to create a new case in MySupport

    http://www.symantec.com/docs/TECH58873

    How to Create and Validate a SymAccount for using Symantec's MySupport

    http://www.symantec.com/docs/HOWTO31127

    How to update a support case and upload diagnostic files with MySupport

    http://www.symantec.com/docs/TECH71023

    OR

    In case, if you are interested in Beta Testing for SEP 12.1 RU2, check this :

    https://symbeta.symantec.com/callout/?callid=1D5D3DD349C248E69B13977DA4DBF426



  • 8.  RE: 12.1 MP1 - Notifications

    Posted Sep 07, 2012 08:21 AM

    SEP 12.1.2  Release Date not announced as of now.

    tentative october..



  • 9.  RE: 12.1 MP1 - Notifications

    Trusted Advisor
    Posted Sep 07, 2012 08:23 AM

    Hello,

    There is no official date of the Release.

    However, the SEP 12.1 RU2 is available for BETA Testing.

     

    Incase, if you are interested in Beta Testing for SEP 12.1 RU2, check this :

    https://symbeta.symantec.com/callout/?callid=1D5D3DD349C248E69B13977DA4DBF426

    Hope that helps!!



  • 10.  RE: 12.1 MP1 - Notifications

    Posted Sep 07, 2012 12:25 PM

    Thanks everyone.



  • 11.  RE: 12.1 MP1 - Notifications

    Posted Sep 07, 2012 12:29 PM

    hi,

    if you have received your answer please mark a solution.