Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Can't make a client connect to the symantec server to fetch updates

Updated: 21 May 2010 | 19 comments
ash2107's picture
0 0 Votes
Login to vote

Hi,
I have a server environment and SEP update through the deploy system, all clients are connecting fine but just one is not showing green dot.
I have uninstalled the symantec and reinstalled it through the server SEP deploy wizard. I can't make the pc do live update as i want it to download the update from the server.

Thanks

discussion Filed Under:

Comments

Ryk_8472's picture
06
Oct
2009
0 Votes 0
Login to vote

can you provide any more

can you provide any more info, What version your using, what you have and haven't tried etc

ash2107's picture
06
Oct
2009
0 Votes 0
Login to vote

symantec endpoint protection,

symantec endpoint protection, I have tried the push to deploy from the symantec server,
Uninstalled and reinstalled the symantec on the pc through the deply wizard, but it is still not showing the green dot and not updating, saying last update version 05 november 2008!!

Aniket Amdekar's picture
06
Oct
2009
0 Votes 0
Login to vote

Hi, Please refer to the

Hi,

Please refer to the following article:

https://www-secure.symantec.com/connect/articles/t...

Also, if you see that there is no green dot on the shield icon, and in help & support > troubleshooting inside the client GUI, you find that the server is offline, you can run the sylinkmonitor tool and look at errors in the logfile.

Best,
Aniket

ash2107's picture
06
Oct
2009
0 Votes 0
Login to vote

I have 60 pc's connected to

I have 60 pc's connected to this symantec server.. all are getting their definition updates
but one is showing red cross on the pc.. and not showing as connected to the symantec server..
1.  On symantec endpoint manager I have added the pc but dont kno if i did it the right way but if i go through the deploy wizard, i can see the pc name there and thats the way i reinstalled the symantec on that computer.
2. When i go on the program files>symantec>symantec shared> the is no "sylink.xml" file in that folder..  does this file dont installed by itself when we install the symantec through the deploy way..
3. the pc is restricted to connect to the internet without going through the server so can't do live update..
I'm stressed
pleaseeeee help

Aniket Amdekar's picture
06
Oct
2009
0 Votes 0
Login to vote

Hi, 1. You shold not add a

Hi,

1. You shold not add a computer directly in SEPM. You must deploy an installation package so the client gets installed and then it automatically shos up in SEPM.

2. sylink.xml file is in c:\program files\symantec\symantec endpoint protection folder.

3. I think you should re-install the client on that machine and see if it gets connected.

Please refer  to the KB article below to export an installation package:

http://service1.symantec.com/support/ent-security....

Best,
Aniket

ash2107's picture
06
Oct
2009
0 Votes 0
Login to vote

I already uninstalled the

I already uninstalled the symantec from the pc and reinstalled it, still not connecting
However the PC did had another name previously and was changed over some months back.. I was not here so dont know the exact date!! Can this affect it??

ash2107's picture
06
Oct
2009
0 Votes 0
Login to vote

If the pc was previously

If the pc was previously connecting to the SEPM, the name should be on the SEPM list right..
But wehn i go there i cant see the name of the pc and if i go on unmanaged and do a search a see the previous name of the pc coming up as under Unkown category!!

Aniket Amdekar's picture
06
Oct
2009
0 Votes 0
Login to vote

In that case, please run the

In that case, please run the sylinkmonitor and post the logs.

Aniket

ash2107's picture
06
Oct
2009
0 Votes 0
Login to vote

run it on the particular

run it on the particular client computer which is not connecting??

Aniket Amdekar's picture
06
Oct
2009
0 Votes 0
Login to vote

yes. The logs from that

yes. The logs from that client can let us know whats wrong.

ash2107's picture
07
Oct
2009
0 Votes 0
Login to vote

when I unzip and run the

when I unzip and run the sylinkmonitor file.. the box stays empty!! any reason for that??

ash2107's picture
07
Oct
2009
0 Votes 0
Login to vote

Another thing I'm thinking

Another thing I'm thinking of.. when i unistal the symantec on the pc through add and remove program, do i need to check if there is any symantec registry files left.. if so how do i find those!!
Thanks for your help..

jeffwichman's picture
07
Oct
2009
0 Votes 0
Login to vote

Sylinkmonitor should remain

Sylinkmonitor should remain empty if I recall correctly.  There are some registry modification you need to make.  Follow these instructions.  Also please post what version your clients are running to help us, help you.

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/4be077e14183395388257348007a2472?OpenDocument

ash2107's picture
07
Oct
2009
0 Votes 0
Login to vote

if Sylinkmonitor remains

if Sylinkmonitor remains empty does that means the symantec is running fine on the pc?

ash2107's picture
07
Oct
2009
0 Votes 0
Login to vote

Symantec end point 2008,

Symantec end point 2008, runing on a server..

jeffwichman's picture
08
Oct
2009
0 Votes 0
Login to vote

1.  Configure registry

1.  Configure registry changes for SylinkMonitor
     - Set registry key: HKLM\Software\Symantec\Symantec Endpoint Protection\SMC - smc_debuglog_on = 1
    - Stop SMC: START > RUN > smc –stop
    - Start SMC: START > RUN > smc –start 
2.  Run SylinkMonitor
3. On the client system, right click the SEP icon (near the clock) and choose Update Policy. 

If you do not see anything happening at this point there is something really wrong with the installation.

ash2107's picture
08
Oct
2009
0 Votes 0
Login to vote

that smc -stop or smc -start,

that smc -stop or smc -start, dont work for me, gets an error box..

ash2107's picture
08
Oct
2009
0 Votes 0
Login to vote

I have checked the sylink.mxl

I have checked the sylink.mxl on the pc with another user connecting fine.. its the same.. the only thing i remarked is that the setting box display under troubleshoot is direct.. seems like older.. I deploy the installation through the deploy wizard thou.. do i need to update the deploy installation on the deploy wizard to later version of the symantec or does the update do this automatically

Ghent's picture
14
Oct
2009
0 Votes 0
Login to vote

Test the connection to SEPM

See if you can get a simple web connection from the offline client to the SEPM server.
On the client that is offline, open your web browser and go to:
http://<SEPM_Server_IP_or_Machine_Name:Port>/secars?hello,secars
You can find the port number in your Sylink.xml file, the default is 8014.

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/a6b9dc2d869c89a58825737700642895?OpenDocument

This problem client isn't installed on the same machine as the SEPM server, is it?