Endpoint Protection

We are getting about 200+ of these a day on our SEPM server. The server is running Windows Server 2008R2 and SQL 2008 x64 as the Back end. Everything seems to be working fine however if there is a way we can get these to stop triggering in the application log that would be great because we are getting a lot of alerts in our managment software. I am not sure if the 2 events are related. Thanks Everyone!

Log Name:      Application
Source:        Application Error
Date:          12/23/2009 7:24:37 AM
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:     
Description:
Faulting application name: php-cgi.exe, version: 5.2.9.9, time stamp: 0x49b02fd4
Faulting module name: ntdll.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdb3b
Exception code: 0xc0000005
Fault offset: 0x00038c39
Faulting process id: 0x5c0
Faulting application start time: 0x01ca83cae415d59c
Faulting application path: C:\PROGRA~2\Symantec\SYMANT~1\Php\php-cgi.exe
Faulting module path: C:\Windows\SysWOW64\ntdll.dll
Report Id: 2230aa48-efbe-11de-9ea3-000c2996e814

Log Name:      Application
Source:        MSSQLSERVER
Date:          12/23/2009 7:23:50 AM
Event ID:      18456
Task Category: Logon
Level:         Information
Keywords:      Classic,Audit Failure
User:          N/A
Computer:     
Description:
Login failed for user '****'. Reason: Could not find a login matching the name provided. [CLIENT: <local machine>]

Hi,

You can run the SEP support tool and let us know if you can see any errors in the results.

Aniket

I ran the tool and attached the output of the Errors

I am not sure why it is complaning about the min requirements because the server has SQL 2008 SP1 on it.

Error	Microsoft SQL Server version 2007.0100.2531.00 ((Katmai_PCU_Main).090329-1004) is not an identified version.
Error	Microsoft SQL Server Native Client's bcp.exe is not installed in directory: c:\program files (x86)\microsoft sql server\100\tools\binn.
Information	Microsoft SQL Server Native Client version 10.0.2531.0 is not an identified version.

Issue	Can Symantec Endpoint Protection communicate with its Symantec Endpoint Protection Manager?
Overview	This reports the results of a secars test to the FQDN and IP address of the servers listed in sylink.xml. The tests have a timeout of 20 seconds for connection, send and receive functions.
Product	Symantec Endpoint Protection
Category	Status
Subcategory	Communications
Click for more ->	Troubleshooting Client/Server Connectivity
Status	Error
Tests	Error The Secars communication test failed for these consoles: Site Port Http Code Error server.ournet.com 80 404   x.x.x.x 80 404   Information Sylink.xml lists the following Symantec Endpoint Protection Manager: Priority Address DnsIP 1 server.ournet.com x.x.x.x Ok None of the listed Management servers have a DNS error.

Thanks guys for taking the time to look at this. If you need anything else let me know.

Which is the version you are using?
  if it is an older version I will recommend you to upgrade it to RU5 Since it is the only version which supports in windows 2k8 officially.Also installing Symantec Endpoint Protection Manager 11 with a SQL Server 2008 Database is officially supported only with Symantec Endpoint Protection Manager 11 RU5 
For more info refer the below docs
Best Practices guide for Installing the Symantec Endpoint Protection Manager 11 RU5 with a SQL Server 2008 Database
Migrating to Symantec Endpoint Protection 11.0 RU5

This is a RU5 Installation.

Please check if you have multiple PHP versions are installed to the same web server.

Also, could you confirm if both these websites run on Default website or run Custom Website
 

Try this also
Try this stepsVerify PHP