Endpoint Protection

 View Only

  • 1.  All SEP clients are unable to connect to SEPM but showing online in SEPM console

    Posted Mar 04, 2013 06:34 AM

    Hi All,

    We have one issue in central SEPM server. All SEP clients are unable to connect with the Management server (where multiple priorities are configured) but the same is showing as online in SEPM console. We have a management server list configured with fallback option but none of the clients are swaitched to the fallback SEPM if they are unable to communicate with the Central SEPM. We have restarted both SQL and SEPM servers but no luck. Can anybody please help me.

     

    Regards,

    Sabyasachi



  • 2.  RE: All SEP clients are unable to connect to SEPM but showing online in SEPM console

    Posted Mar 04, 2013 06:38 AM

    Can you post the sylink log from one of the affected clients

    How to enable Sylink debugging for the Symantec Endpoint Protection 11.x and 12.1 client in the Windows Registry

    Article:TECH104758  |  Created: 2008-01-18  |  Updated: 2013-02-26  |  Article URL http://www.symantec.com/docs/TECH104758

     



  • 3.  RE: All SEP clients are unable to connect to SEPM but showing online in SEPM console

    Posted Mar 04, 2013 06:44 AM

    Hello,

    Please check 80 port is open or not and if it is open then check that port 80 is getting telnet or not.



  • 4.  RE: All SEP clients are unable to connect to SEPM but showing online in SEPM console

    Posted Mar 04, 2013 07:00 AM
      |   view attached

    Hi,

     

    Thanks for your response. Please find the same for one of the problematic client.

     

    Attachment(s)

    7z
    Sylink_0.7z   3 KB 1 version


  • 5.  RE: All SEP clients are unable to connect to SEPM but showing online in SEPM console

    Posted Mar 04, 2013 07:39 AM

    need few more info after this line

     

     
    03/04 17:22:25.041 [4060] 17:22:25=>Send HTTP REQUEST
    03/04 17:22:25.337 [2520] 17:22:25=>HTTP REQUEST sent
    03/04 17:22:25.337 [2520] 17:22:25=>QUERY return code
    whats the return code you find?


  • 6.  RE: All SEP clients are unable to connect to SEPM but showing online in SEPM console

    Posted Mar 04, 2013 07:45 AM
      |   view attached

    Please find the same

    Attachment(s)

    7z
    Sylink(1).7z   6 KB 1 version


  • 7.  RE: All SEP clients are unable to connect to SEPM but showing online in SEPM console

    Posted Mar 04, 2013 07:59 AM

    Follow these documents 

     

    1.   Open the registry (Start->Run->type "regedit").

    2.  Go to HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\InternetSettings\connections

    3.  Delete the registry keys "DefaultConnectionSettings" and "SavedLegacySettings".

    4.  Reboot the machine.

    Note:  These registry keys will automatically regenerate after reboot of machine.

     

    Also, this also could be caused due to incorrect proxy server information in the following registry location: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\InternetSettings

    Removing the incorrect proxy info from this key and then rebooting allowed the client to communicate normally.

    One important thing to keep in mind is that any incorrect proxy information must also be removed from the following two locations as well:

    HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\DefaultConnectionSettings HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings

    If the settings are not removed from these two keys, they will repopulate the Internet Settings key after every reboot.

    Remove the incorrect proxy information from all 3 registry locations noted above, then reboot.

     

    ==========================================================

    and this document too, if it fails , post a fresh sylink please.

    http://www.symantec.com/business/support/index?page=content&id=TECH139251