Endpoint Protection

I try to set the SEPM as the update server for clients, the client updates fail. (The SEPM, pulls all the updates from the LUS successfully and shows them as available, in the Live Update portion of "Admin - Server".  At this point the only client i have setup is the server itself.  Clicking the fix button on the client does nothing and no errors are reported.  The date of the virus definitions does not change 

Check the LivUpdate settings in Policies. This will tell the clients how to get their updates.

Generally, you only have to check the "Use the default management server" and the others unchecked. The clients will get their updates from the SEPM. This will only take effect when the clients received the new policies.

You may also change the communication settings if all clients are connected.

does the client shows green dot?

can you post the sylink logs from the client ?

client server troubleshooting..

http://www.symantec.com/business/support/index?page=content&id=TECH105894&locale=en_US

Check out one of the best article for troubleshooting Liveupdate

http://www.symantec.com/business/support/index?page=content&id=TECH95790&locale=en_US

Pete_4u2002,

The client shows a green dot in the Manager, but the client shows a red circle on the shield.  where do i go to get the sylink logs from the client?

Download and use sylink toggle

https://www-secure.symantec.com/connect/downloads/sylink-toggle

When I download and run the sylink I get the following log -

SyToggleON script stating at  9:02:57.91
SyToggleON script stating directory "C:\SyToggle"
Looking for SEP install
Current Debug Value = 
Debugging has already been enabled - Skipping 'set debug'
Install found at: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection
Error writing to registry!
 

So how do I get to the debuging log since this log indicates that debugging has already been enabled?

Enable sylink debugging following this

http://www.symantec.com/business/support/index?page=content&id=TECH102412&locale=en_US

here is the sylink log

10/22 10:34:34 [3788] ~~~Sylink log started. (SEP Product Version in registry: 11.0.6100.645, Sylink File Version: 11.0.6100.480)
10/22 10:34:34 [3788] Stored HostGUID=4C5233330A0102F40053FF8937DAC3BC; outlen=16
10/22 10:34:34 [3788] <RestoreSettings>Stored UserGuid=0; outlen=2
10/22 10:34:34 [3788] <mfn_DecodeSSN>Sygate-SSN=482
10/22 10:34:34 [3788] <mfn_DecodeSSN>Read CSN=483
10/22 10:34:34 [3788] <mfn_DecodeSSN>Sygate-SSN=7
10/22 10:34:34 [3788] <mfn_DecodeSSN>Read CSN=8
10/22 10:34:34 [3788] Product Type=3,Major Ver=6,Minor Ver=1,Platform ID=18,OSType=50725138
10/22 10:34:34 [3788] OS=Windows Server 2008 Standard Edition; number=6.1.7600
10/22 10:34:34 [3788] SyLinkCreateInstance => Instance created: 0000000003C5A7E0 Registry path: SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK
10/22 10:34:34 [3788] <GetOnlineNicInfo>:Netport Count=0
10/22 10:34:34 [3788] <GetOnlineNicInfo>:NicInfo
10/22 10:34:34 [3788] SyLinkCreateConfig => Created instance: 0000000003C8B990
10/22 10:34:34 [3788] UseNewConfig => Created m_hNewConfig: 0000000003C8B990
10/22 10:34:34 [3788] Importing ConfigObject: 0000000003C856C0 into: 0000000003C8B990
10/22 10:34:34 [3788] Importing ConfigObject: 0000000003C856C0 into: 0000000003C87AA0
10/22 10:34:34 [3788] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
10/22 10:34:34 [3788] SSA packageType is set as 105
10/22 10:34:34 [3788] SyLinkDeleteConfig => Deleting instance: 0000000003C856C0
10/22 10:34:34 [3788] <SetHiStatus>HI status is changed to=3; reason=105; rule=Host Integrity check is disabled.
 Host Integrity policy has been disabled by the administrator.
10/22 10:34:35 [3788] SyLinkCreateConfig => Created instance: 00000000048DD7A0
10/22 10:34:35 [3788] SetCurLocationName: Name is set to - Default
10/22 10:34:35 [3788] SetCurLocationID: ID is set to - 9FC56B650A0102F401FB85A19D3B3A10
10/22 10:34:35 [3788] SyLinkCreateConfig => Created instance: 00000000046BF910
10/22 10:34:35 [3788] RemeberCurrentGroup=0,RememberCurrentPolicyMode=0
10/22 10:34:35 [3788] Importing ConfigObject: 00000000046BF910 into: 0000000003C8B990
10/22 10:34:35 [3788] Importing ConfigObject: 00000000046BF910 into: 0000000003C87AA0
10/22 10:34:35 [3788] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
10/22 10:34:35 [3788] SyLinkDeleteConfig => Deleting instance: 00000000046BF910
10/22 10:34:35 [3788] SyLinkDeleteConfig => Deleting instance: 00000000048DD7A0
10/22 10:34:35 [5740] <ScheduleNextUpdate>Manually assigned heartbeat=1 seconds
10/22 10:34:35 [824] <ScheduleNextUpdate>Manually assigned heartbeat=1 seconds
10/22 10:34:35 [3788] <CSyLink::Start()>
10/22 10:34:35 [3788] <EncodeHelper::DecryptUrl>
10/22 10:34:35 [3788] <CSyLink::Start> The last server used was '10.1.2.244'
10/22 10:34:35 [3788] <CSyLink::ImportConfigFile()>
10/22 10:34:35 [3788] CUpdateConfig::Dump
10/22 10:34:35 [3788] </CSyLink::ImportConfigFile()>
10/22 10:34:35 [3788] <GetDomainHostName>msz_DomainName is taken from szDomainName
10/22 10:34:35 [3788] <GetDomainHostName>DomainName (Final)=w3domain.com
10/22 10:34:35 [3788] <HWID CSyLink::GetHardwareKey> Get Hardware ID
10/22 10:34:35 [3788] <HWID CSyLink::GetHardwareKey> Hardware ID assigned: E395AD7072470FA4BE9F711474732CCC
10/22 10:34:35 [3788] <Start>Unable to create Session with 'No Proxies' settings - Error Code: 87
10/22 10:34:35 [3788] <EncodeHelper::DecryptUrl>
10/22 10:34:35 [3788] <Add2LUFileList:>Adding LU Info to LU Download File List: {1CD85198-26C6-4bac-8C72-5D34B025DE35}101021049
10/22 10:34:35 [3788] <EncodeHelper::DecryptUrl>
10/22 10:34:35 [3788] <Add2LUFileList:>Adding LU Info to LU Download File List: {42B17E5E-4E9D-4157-88CB-966FB4985928}101020001
10/22 10:34:35 [3788] <EncodeHelper::DecryptUrl>
10/22 10:34:35 [3788] <Add2LUFileList:>Adding LU Info to LU Download File List: {CC40C428-1830-44ef-B8B2-920A0B761793}101021009
10/22 10:34:35 [3788] <EncodeHelper::DecryptUrl>
10/22 10:34:35 [3788] <Add2LUFileList:>Adding LU Info to LU Download File List: {4F889C4A-784D-40de-8539-6A29BAA43139}91111048
10/22 10:34:35 [3788] <EncodeHelper::DecryptUrl>
10/22 10:34:35 [3788] <Add2LUFileList:>Adding LU Info to LU Download File List: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}101021009
10/22 10:34:35 [6012] <HeartbeatThreadProc:>Thread is about to begin..
10/22 10:34:35 [5540] Successfully created the heartbeat thread
10/22 10:34:35 [3788] <Start>Started, contact SMS every 300 seconds
10/22 10:34:35 [3788] <PostEvent>going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED
10/22 10:34:35 [3788] <PostEvent>done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0
10/22 10:34:35 [3788] </CSyLink::Start()>
10/22 10:34:36 [3788] <SetClientAuth>Received new User/Domain from SMC..  User: operations User Domain: W3DOMAIN
10/22 10:34:36 [3788] <SetClientAuth>Getting RDNS Domain Name (user domain in AD setup)..
10/22 10:34:36 [3788] <GetLoginRdnsDomain>DNS domain=W3DOMAIN.COM
10/22 10:34:36 [3788] <SetClientAuth>Setting the User Domain to RDNS Domain ..
10/22 10:34:36 [3788] <SetClientAuth>Logged in user info set to: W3DOMAIN.COM/operations
10/22 10:34:36 [3788] <SetClientAuth>Marking User Change Notify to redo registration..
10/22 10:34:36 [6012] <CheckHeartbeatTimer>====== Heartbeat loop starts at 10:34:36 ======
10/22 10:34:36 [6012] <GetOnlineNicInfo>:Netport Count=1
10/22 10:34:36 [6012] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.1.2.244" Mac="f0-4d-a2-00-46-35" Gateway="10.1.2.1" SubnetMask="255.255.255.0"/></SSANICs>
10/22 10:34:37 [6012] <CalcAgentHashKey>:CH=0A9DFE140A0102F40116703AD2D231001ArtServerw3domain.comE395AD7072470FA4BE9F711474732CCC
10/22 10:34:37 [6012] <CalcAgentHashKey>:CHKey=7308C04D9BBA9774CECAEE98682421B1
10/22 10:34:37 [6012] <CalcAgentHashKey>:C=0A9DFE140A0102F40116703AD2D231001ArtServerw3domain.com
10/22 10:34:37 [6012] <CalcAgentHashKey>:CKey=9D62BF7F8D8AA7FFD448C6474165505C
10/22 10:34:37 [6012] <CalcAgentHashKey>:UCH=0A9DFE140A0102F40116703AD2D231000operationsW3DOMAIN.COMArtServerw3domain.comE395AD7072470FA4BE9F711474732CCC
10/22 10:34:37 [6012] <CalcAgentHashKey>:UCHKey=38854544E2C15BC382C23D2829937466
10/22 10:34:37 [6012] <CalcAgentHashKey>:UC=0A9DFE140A0102F40116703AD2D231000operationsW3DOMAIN.COMArtServerw3domain.com
10/22 10:34:37 [6012] <CalcAgentHashKey>:UCKey=FCC81D3B07940333A6B27F4E25D59165
10/22 10:34:37 [6012] <DoHeartbeat>HardwareID=E395AD7072470FA4BE9F711474732CCC
10/22 10:34:37 [6012] <DoHeartbeat>CHKey=7308C04D9BBA9774CECAEE98682421B1
10/22 10:34:37 [6012] <DoHeartbeat>CKey=9D62BF7F8D8AA7FFD448C6474165505C
10/22 10:34:37 [6012] <DoHeartbeat>UCHKey=38854544E2C15BC382C23D2829937466
10/22 10:34:37 [6012] <DoHeartbeat>UCKey=FCC81D3B07940333A6B27F4E25D59165
10/22 10:34:37 [6012] <DoHeartbeat> Set heartbeat event
10/22 10:34:37 [6012] Use new configuration
10/22 10:34:37 [6012] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 10:34:37 ======
10/22 10:34:37 [6012] HEARTBEAT: Check Point 1
10/22 10:34:37 [6012] HEARTBEAT: Check Point 2
10/22 10:34:37 [6012] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
10/22 10:34:37 [6012] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
10/22 10:34:37 [6012] HEARTBEAT: Check Point 3
10/22 10:34:37 [6012] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
10/22 10:34:37 [5740] SyLinkCreateConfig => Created instance: 00000000048DD7A0
10/22 10:34:37 [5740] Importing ConfigObject: 0000000003C87AA0 into: 00000000048DD7A0
10/22 10:34:37 [5740] SyLinkDeleteConfig => Deleting instance: 00000000048DD7A0
10/22 10:34:37 [6012] HEARTBEAT: Check Point 4
10/22 10:34:37 [6012] <RegHeartbeatProc>===Registration STAGE===
10/22 10:34:37 [6012] <MakeRegisterData:>logon id (domain/user)=W3DOMAIN.COM/operations
10/22 10:34:37 [6012] <GeneratePreferredGroupAndModeInRegistration:>Loading current group:My Company\Servers64Bit
10/22 10:34:37 [6012] <GeneratePreferredGroupAndModeInRegistration:>Loading current mode:1
10/22 10:34:37 [6012] <GeneratePreferredGroupAndModeInRegistration:>Loading preferred group:My Company\Servers64Bit
10/22 10:34:37 [6012] <GeneratePreferredGroupAndModeInRegistration:>Loading preferred mode:1
10/22 10:34:37 [6012] <GeneratePreferredGroupAndModeInRegistration:>It will remember nothing, PreferredGroup is My Company\Servers64Bit, PreferredMode is 1
10/22 10:34:37 [6012] <MakeRegisterData:>XML data: <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="0A9DFE140A0102F40116703AD2D23100" AgentType="105" UserDomain="W3DOMAIN.COM" LoginUser="operations" ComputerDomain="w3domain.com" ComputerName="ArtServer" PreferredGroup="My%20Company%5cServers64Bit" PreferredMode="1" HardwareKey="E395AD7072470FA4BE9F711474732CCC" SiteDomainName=""/>

<SSAHostInfo><NetworkIdentity UserDomain="W3DOMAIN.COM" LogonUser="operations" HostDomain="w3domain.com" HostName="ArtServer" HostDesc="ArtServer" />

<SSAProduct Version="11.0.6100.645" />

<SSAOS Version="6.1.7600" Desc="Windows%20Server%202008%20Standard%20Edition" Type="50725138" ServicePack=""/>

<Processor ProcessorType="Intel64%20Family%206%20Model%2026%20Stepping%205" ProcessorClock="2128" ProcessorNum="4"/>

<Memory Size="6432055296"/>

<BIOS Version="DELL%20%20%20-%201"/>

<TpmDevice Id="0"/>

<SSAProfile Version="5.0.0" SerialNumber="DF71-10%2f20%2f2010%2014%3a32%3a48%20841"/>

<SSAIDS Version="" SerialNumber=""/>

<SSAUTC Bias="480" />

<DNSs><DNS Address="10.1.2.240"/></DNSs>

<SSANICs><SSANIC Ip="10.1.2.244" Mac="f0-4d-a2-00-46-35" Gateway="10.1.2.1" SubnetMask="255.255.255.0"/></SSANICs>

</SSAHostInfo>

</SSARegData>
10/22 10:34:37 [6012] <SyLink>[MakeRegisterData] registration Hardware Key=E395AD7072470FA4BE9F711474732CCC
10/22 10:34:37 [6012] ************Reg CSN=9
10/22 10:34:37 [6012] <mfn_GenPostData (for Registration):>Request is: s_origin_length: 1217

s_session_id: E395AD7072470FA4BE9F711474732CCC

Sygate-SSN: 9

<?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="0A9DFE140A0102F40116703AD2D23100" AgentType="105" UserDomain="W3DOMAIN.COM" LoginUser="operations" ComputerDomain="w3domain.com" ComputerName="ArtServer" PreferredGroup="My%20Company%5cServers64Bit" PreferredMode="1" HardwareKey="E395AD7072470FA4BE9F711474732CCC" SiteDomainName=""/>

<SSAHostInfo><NetworkIdentity UserDomain="W3DOMAIN.COM" LogonUser="operations" HostDomain="w3domain.com" HostName="ArtServer" HostDesc="ArtServer" />

<SSAProduct Version="11.0.6100.645" />

<SSAOS Version="6.1.7600" Desc="Windows%20Server%202008%20Standard%20Edition" Type="50725138" ServicePack=""/>

<Processor ProcessorType="Intel64%20Family%206%20Model%2026%20Stepping%205" ProcessorClock="2128" ProcessorNum="4"/>

<Memory Size="6432055296"/>

<BIOS Version="DELL%20%20%20-%201"/>

<TpmDevice Id="0"/>

<SSAProfile Version="5.0.0" SerialNumber="DF71-10%2f20%2f2010%2014%3a32%3a48%20841"/>

<SSAIDS Version="" SerialNumber=""/>

<SSAUTC Bias="480" />

<DNSs><DNS Address="10.1.2.240"/></DNSs>

<SSANICs><SSANIC Ip="10.1.2.244" Mac="f0-4d-a2-00-46-35" Gateway="10.1.2.1" SubnetMask="255.255.255.0"/></SSANICs>

</SSAHostInfo>

</SSARegData>
10/22 10:34:37 [6012] <SendRegistrationRequest:>http://10.1.2.244:8014 [encrypted data]
10/22 10:34:37 [6012] 10:34:37=>Send HTTP REQUEST
10/22 10:34:38 [6012] 10:34:38=>HTTP REQUEST sent
10/22 10:34:38 [6012] 10:34:38=>QUERY return code
10/22 10:34:38 [6012] 10:34:38=>QUERY return code completed
10/22 10:34:38 [6012] <SendRegistrationRequest:>SMS return=200
10/22 10:34:38 [6012] <ParseHTTPStatusCode:>200=>200 OK
10/22 10:34:38 [6012] <SendRegistrationRequest:>Content Lenght => 350
10/22 10:34:38 [6012] HTTP returns status code=200
10/22 10:34:38 [6012] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
10/22 10:34:38 [6012] <SendRegistrationRequest:>COMPLETED, returned 0
10/22 10:34:38 [6012] <IsInClientIPorOnLink> NextHop is equal to10.1.2.244,return TRUE
10/22 10:34:38 [6012] <mfn_GetOutIP> Out IP is:10.1.2.244
10/22 10:34:38 [6012] HEARTBEAT: Check Point 5.1
10/22 10:34:38 [6012] <ScheduleNextUpdate>Manually assigned heartbeat=3 seconds
10/22 10:34:38 [6012] <PostEvent>going to post event=EVENT_SERVER_ONLINE
10/22 10:34:38 [6012] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
10/22 10:34:38 [6012] HEARTBEAT: Check Point 8
10/22 10:34:38 [6012] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
10/22 10:34:38 [6012] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
10/22 10:34:38 [6012] <RegHeartbeatProc>====== Registration Procedure stops at 10:34:38 ======
10/22 10:34:38 [6012] HEARTBEAT: Check Point 10
10/22 10:34:38 [6012] HEARTBEAT: Check Point Complete
10/22 10:34:38 [6012] <RegHeartbeatProc>Done, Heartbeat=3seconds
10/22 10:34:38 [6012] <CheckHeartbeatTimer>====== Heartbeat loop stops at 10:34:38 ======
10/22 10:34:41 [6012] <CheckHeartbeatTimer>====== Heartbeat loop starts at 10:34:41 ======
10/22 10:34:42 [6012] <GetOnlineNicInfo>:Netport Count=1
10/22 10:34:42 [6012] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.1.2.244" Mac="f0-4d-a2-00-46-35" Gateway="10.1.2.1" SubnetMask="255.255.255.0"/></SSANICs>
10/22 10:34:42 [6012] <CalcAgentHashKey>:CH=0A9DFE140A0102F40116703AD2D231001ArtServerw3domain.comE395AD7072470FA4BE9F711474732CCC
10/22 10:34:42 [6012] <CalcAgentHashKey>:CHKey=7308C04D9BBA9774CECAEE98682421B1
10/22 10:34:42 [6012] <CalcAgentHashKey>:C=0A9DFE140A0102F40116703AD2D231001ArtServerw3domain.com
10/22 10:34:42 [6012] <CalcAgentHashKey>:CKey=9D62BF7F8D8AA7FFD448C6474165505C
10/22 10:34:42 [6012] <CalcAgentHashKey>:UCH=0A9DFE140A0102F40116703AD2D231000operationsW3DOMAIN.COMArtServerw3domain.comE395AD7072470FA4BE9F711474732CCC
10/22 10:34:42 [6012] <CalcAgentHashKey>:UCHKey=38854544E2C15BC382C23D2829937466
10/22 10:34:42 [6012] <CalcAgentHashKey>:UC=0A9DFE140A0102F40116703AD2D231000operationsW3DOMAIN.COMArtServerw3domain.com
10/22 10:34:42 [6012] <CalcAgentHashKey>:UCKey=FCC81D3B07940333A6B27F4E25D59165
10/22 10:34:42 [6012] <DoHeartbeat>HardwareID=E395AD7072470FA4BE9F711474732CCC
10/22 10:34:42 [6012] <DoHeartbeat>CHKey=7308C04D9BBA9774CECAEE98682421B1
10/22 10:34:42 [6012] <DoHeartbeat>CKey=9D62BF7F8D8AA7FFD448C6474165505C
10/22 10:34:42 [6012] <DoHeartbeat>UCHKey=38854544E2C15BC382C23D2829937466
10/22 10:34:42 [6012] <DoHeartbeat>UCKey=FCC81D3B07940333A6B27F4E25D59165
10/22 10:34:42 [6012] <DoHeartbeat> Set heartbeat event
10/22 10:34:42 [6012] Use new configuration
10/22 10:34:42 [6012] <CSyLink::IndexHeartbeatProc()>
10/22 10:34:42 [6012] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 0000000003C87AA0
10/22 10:34:42 [6012] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 10:34:42 ======
10/22 10:34:42 [6012] HEARTBEAT: Check Point 1
10/22 10:34:42 [6012] Get First Server!
10/22 10:34:42 [6012] HEARTBEAT: Check Point 2
10/22 10:34:42 [6012] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
10/22 10:34:42 [6012] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
10/22 10:34:42 [6012] HEARTBEAT: Check Point 3
10/22 10:34:42 [6012] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
10/22 10:34:42 [6012] HEARTBEAT: Check Point 4
10/22 10:34:42 [6012] <IndexHeartbeatProc>===Get Index STAGE===
10/22 10:34:42 [6012] ************CSN=484
10/22 10:34:42 [6012] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=4C5233330A0102F40053FF8937DAC3BC&chk=7308C04D9BBA9774CECAEE98682421B1&ck=9D62BF7F8D8AA7FFD448C6474165505C&uchk=38854544E2C15BC382C23D2829937466&uck=FCC81D3B07940333A6B27F4E25D59165&hid=E395AD7072470FA4BE9F711474732CCC&groupid=0A9DFE140A0102F40116703AD2D23100&mode=0&hbt=300&as=484&cn=[hex]417274536572766572&lun=[hex]6F7065726174696F6E73&udn=[hex]5733444F4D41494E2E434F4D
10/22 10:34:42 [6012] <GetIndexFileRequest:>http://10.1.2.244:8014/secars/secars.dll?h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
10/22 10:34:42 [6012] 10:34:42=>Send HTTP REQUEST
10/22 10:34:42 [6012] 10:34:42=>HTTP REQUEST sent
10/22 10:34:42 [6012] <GetIndexFileRequest:>SMS return=200
10/22 10:34:42 [6012] <ParseHTTPStatusCode:>200=>200 OK
10/22 10:34:42 [6012] <FindHeader>Sem-HashKey:=>7308C04D9BBA9774CECAEE98682421B1
10/22 10:34:42 [6012] <GetIndexFileRequest:>Loading the current mode:1
10/22 10:34:42 [6012] <FindHeader>Sem-LANSensor:=>0
10/22 10:34:42 [6012] <FindHeader>Sem-Signatue:=>2B3A0D768C61B958B805235C7D7FCCDB6CC98FAD64E7E5A131260728AA05B8ACF8B31EE62BFFD8D7575FF7D23CB342B4668E7924B031DBB592F1352EF62091FED6C671D38C2AA64D634D85C00237C99E733DF5FF126A2F21CC7AE292420A221CBAFDBAB10B9E2CE2160D66B4C10B658ED6E8EF41FC2CE206E0A496DF2EC819BF
10/22 10:34:42 [6012] <mfn_DoGetIndexFile200>Content Lenght => 1343
10/22 10:34:42 [6012] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
10/22 10:34:42 [6012] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="556693110A0102F40054F13C64CE3E31" ServerID="5621AD300A0102F4010AC03569B20173" GroupID="DF71F3140A0102F40067692E98CD6670" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "22/10/2010 02:53:18"> <Profile Checksum="0E9AD6B7D34BE0C1ADA3A6AD9BBD960A" SerialNumber="DF71-10/20/2010 14:32:48 841" LastModifiedTime="21/10/2010  18:03:44"/> <ConfigFile Checksum="B1A4977D3411AC339DA77954028C45CE" LastModifiedTime="21/10/2010  14:15:37"/> <IDSFile Checksum="703A0AE1B8EC84B36CDBAECB7E800283" LastModifiedTime="21/10/2010  14:15:38"/> <SylinkFile Checksum="0443CBD8CA2AE738877E2A969C6EC0A7" LastModifiedTime="21/10/2010  18:03:44"/> <LSProfile Checksum="7554B7BE17A287D56013C765DE5C6651" SerialNumber ="DF71-10/20/2010 14:32:48 841" LastModifiedTime ="21/10/2010  18:03:44"/>
 <LiveUpdate>
  <File Checksum="084E02A6876E3CC4C9A81C0E52EA6851" DeltaFlag="1" FullSize="95453531" LastModifiedTime="1287741190099" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="101021049"/>
   <File Checksum="24D7CFF6884BB395950E05D76003934E" DeltaFlag="1" FullSize="97101008" LastModifiedTime="1287741126097" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="101021049"/>
   <File Checksum="5373BC888C4BA982BBE765A0DEF4C8BB" DeltaFlag="1" FullSize="972943" LastModifiedTime="1287693747794" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="101020001"/>
   <File Checksum="FD34E4D55805DABB726F4EB854B4F3B1" DeltaFlag="1" FullSize="953363" LastModifiedTime="1287693738811" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="101020001"/>
   <File Checksum="704BFE3ADF342859EAB4FEF6D449A498" DeltaFlag="1" FullSize="669829" LastModifiedTime="1287693739315" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
   <File Checksum="4B7BD1E94D0BB1C2AE9B95682920120D" DeltaFlag="1" FullSize="650307" LastModifiedTime="1287693742443" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
   <File Checksum="B014E3924B314F09E79D090EEEEC5784" DeltaFlag="1" FullSize="76770" LastModifiedTime="1287693742734" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="101021009"/>
   <File Checksum="D5B6E2E9B6BC4680C0C1C3DCAD526635" DeltaFlag="1" FullSize="2927034" LastModifiedTime="1287693743505" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="101021009"/>
   <File Checksum="48DAD8B30B02BCA6FE5E4C22E6193362" DeltaFlag="1" FullSize="88188" LastModifiedTime="1287693744838" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
   <File Checksum="E4775359564F549B7AFAEFF44281AAE4" DeltaFlag="1" FullSize="6487" LastModifiedTime="1287693745084" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="91111048"/>
   <File Checksum="0E9987631E6D6E99A5D0EDE2EE0532D1" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1287693745718" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
   <File Checksum="F73A6CAEE24D79DE940CAF525CEA54C0" DeltaFlag="1" FullSize="2927064" LastModifiedTime="1287693748450" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="101021009"/>
   <File Checksum="210E9367B3EF245FC16C151D605AA092" DeltaFlag="1" FullSize="76760" LastModifiedTime="1287693750797" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="101021009"/>
   <File Checksum="1F86AEEAE9E7B57F6EEFFF543210C35D" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1287693751310" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
 </LiveUpdate>
</GroupIndex>
10/22 10:34:42 [6012] <mfn_DoGetIndexFile200>Parser Index File!
10/22 10:34:42 [6012] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
10/22 10:34:42 [6012] <GetIndexFileRequest:>COMPLETED
10/22 10:34:42 [6012] <IndexHeartbeatProc>GetIndexFile handling status: 0
10/22 10:34:42 [6012] <IndexHeartbeatProc>Switch Server flag=0
10/22 10:34:42 [6012] HEARTBEAT: Check Point 5.1
10/22 10:34:42 [6012] <IsInClientIPorOnLink> NextHop is equal to10.1.2.244,return TRUE
10/22 10:34:42 [6012] <mfn_GetOutIP> Out IP is:10.1.2.244
10/22 10:34:42 [6012] <IndexHeartbeatProc> Saved IP Address: 10.1.2.244
10/22 10:34:42 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:42 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
10/22 10:34:42 [6012] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Seq:101021049
10/22 10:34:42 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:42 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
10/22 10:34:42 [6012] <mfn_LiveUpdate:> Agent returned closest matching seq: 100617018
10/22 10:34:42 [6012] <Add2LUFileList:>Adding LU Info to LU Download File List: {1CD85198-26C6-4bac-8C72-5D34B025DE35}101021049
10/22 10:34:42 [6012] <Add2LUFileList:>File Info already exists, hence updating: {1CD85198-26C6-4bac-8C72-5D34B025DE35}101021049
10/22 10:34:42 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
10/22 10:34:43 [6012] <mfn_LiveUpdate:> Agent returned closest matching seq: 100313002
10/22 10:34:43 [6012] <Add2LUFileList:>Adding LU Info to LU Download File List: {42B17E5E-4E9D-4157-88CB-966FB4985928}101020001
10/22 10:34:43 [6012] <Add2LUFileList:>File Info already exists, hence updating: {42B17E5E-4E9D-4157-88CB-966FB4985928}101020001
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
10/22 10:34:43 [6012] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq:101020001
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
10/22 10:34:43 [6012] <mfn_LiveUpdate:> Agent returned closest matching seq: <None>
10/22 10:34:43 [6012] <Add2LUFileList:>Adding LU Info to LU Download File List: {CC40C428-1830-44ef-B8B2-920A0B761793}101021009
10/22 10:34:43 [6012] <Add2LUFileList:>File Info already exists, hence updating: {CC40C428-1830-44ef-B8B2-920A0B761793}101021009
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
10/22 10:34:43 [6012] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Seq:101021009
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
10/22 10:34:43 [6012] <mfn_LiveUpdate:> Agent returned closest matching seq: <None>
10/22 10:34:43 [6012] <Add2LUFileList:>Adding LU Info to LU Download File List: {4F889C4A-784D-40de-8539-6A29BAA43139}91111048
10/22 10:34:43 [6012] <Add2LUFileList:>File Info already exists, hence updating: {4F889C4A-784D-40de-8539-6A29BAA43139}91111048
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
10/22 10:34:43 [6012] <mfn_LiveUpdate:> Agent returned closest matching seq: <None>
10/22 10:34:43 [6012] <Add2LUFileList:>Adding LU Info to LU Download File List: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}101021009
10/22 10:34:43 [6012] <Add2LUFileList:>File Info already exists, hence updating: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}101021009
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
10/22 10:34:43 [6012] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Seq:101021009
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
10/22 10:34:43 [6012] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C13726A9-8DF7-4583-9B39-105B7EBD55E2} Seq:80820001
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_SERVER_ONLINE
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
10/22 10:34:43 [6012] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=300 seconds
10/22 10:34:43 [6012] HEARTBEAT: Check Point 6
10/22 10:34:43 [6012] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
10/22 10:34:43 [6012] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: GUP
10/22 10:34:43 [6012] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
10/22 10:34:43 [6012] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
10/22 10:34:43 [6012] ReasonDescForFailure*** = Host Integrity check is disabled.
10/22 10:34:43 [6012] ReasonDescForFailure*** = Host Integrity check is disabled.
10/22 10:34:43 [6012] *** = <SSAInfo NameSpace="rpc" AgentID="4C5233330A0102F40053FF8937DAC3BC" ComputerID="0A2520C30A0102F40053FF8983B22A94" HardwareKey="E395AD7072470FA4BE9F711474732CCC" GroupID="DF71F3140A0102F40067692E98CD6670">

<AgentHIInfo Status="3" ReasonCode="105" ReasonDescForFailure="Host Integrity check is disabled."/>

<SSAHostInfo>

<NetworkIdentity UserDomain="W3DOMAIN.COM" LogonUser="operations" HostDomain="w3domain.com" HostName="ArtServer" HostDesc="ArtServer"/>

<SSAProduct Version="11.0.6100.645"/>

<SSAOS Version="6.1.7600" Desc="Windows Server 2008 Standard Edition" Type="50725138" ServicePack="" Language="9"/>

<Processor ProcessorType="Intel64 Family 6 Model 26 Stepping 5" ProcessorClock="2128" ProcessorNum="4"/>

<Memory Size="6432055296"/>

<Disk Letter="C:\" Size="106624446464"/>

<BIOS Version="DELL   - 1"/>

<TpmDevice Id="0"/>

<SSAProfile Version="5.0.0" SerialNumber="DF71-10/20/2010 14:32:48 841"/>

<SSAIDS Version="" SerialNumber=""/>

<Deuce Signature="100313002"/>

<SSAUTC Bias="480"/>

<DNSs><DNS Address="10.1.2.240"/></DNSs>

<SSANICs><SSANIC Ip="10.1.2.244" Mac="f0-4d-a2-00-46-35" Gateway="10.1.2.1" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>

</SSAHostInfo>

<RebootRequired Status="0"></RebootRequired>

<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>

</SSAInfo>

10/22 10:34:43 [6012] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 1287768883
10/22 10:34:43 [6012] <mfn_PostAgentInfo>Free memory difference: 4669587456, Threshold: 0
10/22 10:34:43 [6012] <mfn_PostAgentInfo>Free disk space difference: 77550534656, Threshold: 0
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
10/22 10:34:43 [6012] <mfn_PostAgentInfo><?xml version='1.0' encoding='UTF-8' ?>

<SESAgentOpState AgentID="4C5233330A0102F40053FF8937DAC3BC" Timestamp="1287768883247"><TechID Name="AVMan"><Data><![CDATA[<avstate version="1.0"><RTVScanRunning>1</RTVScanRunning><PatternFileRevision>18</PatternFileRevision><UsingPattern>3252754</UsingPattern><PatternFileSequence>0</PatternFileSequence><PatternFileDate>280511000000</PatternFileDate><TimeOfLastVirus>000000000000</TimeOfLastVirus><TimeOfLastScan>000000000000</TimeOfLastScan><WorstInfectionType>9999</WorstInfectionType><OnOff>1</OnOff><SymProtectOnOff>2</SymProtectOnOff><SymSentryInstalled>0</SymSentryInstalled><SavProductVersion>30350368</SavProductVersion><Licensed>0</Licensed><LicenseStatus>0</LicenseStatus><LicenseExpirationTime>000000000000</LicenseExpirationTime><DecAbiVer>1.2.5</DecAbiVer><EraserEngineVer>7208961:78</EraserEngineVer><Moniker Id="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Version="1.5.0" Seq="80929017" Owner="SyKnAppS"  /><Moniker Id="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Version="6.1.0" Seq="80820001" Owner="COH"  /><Moniker Id="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Version="6.1.0" Seq="80820001" Owner="COH"  /></avstate>]]></Data></TechID><TechID Name="GUP"><Data><![CDATA[<?xml version='1.0' encoding='UTF-8' ?>
<GupStatus IsGup="0" NameSpace="rpc" ComputerID="0A2520C30A0102F40053FF8983B22A94"/>]]></Data></TechID><TechID Name="LUMan"><Data><![CDATA[<lustate><lastUpdateTime>1287755678650</lastUpdateTime></lustate>]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="4C5233330A0102F40053FF8937DAC3BC" ComputerID="0A2520C30A0102F40053FF8983B22A94" HardwareKey="E395AD7072470FA4BE9F711474732CCC" GroupID="DF71F3140A0102F40067692E98CD6670">

<AgentHIInfo Status="3" ReasonCode="105" ReasonDescForFailure="Host Integrity check is disabled."/>

<SSAHostInfo>

<NetworkIdentity UserDomain="W3DOMAIN.COM" LogonUser="operations" HostDomain="w3domain.com" HostName="ArtServer" HostDesc="ArtServer"/>

<SSAProduct Version="11.0.6100.645"/>

<SSAOS Version="6.1.7600" Desc="Windows Server 2008 Standard Edition" Type="50725138" ServicePack="" Language="9"/>

<Processor ProcessorType="Intel64 Family 6 Model 26 Stepping 5" ProcessorClock="2128" ProcessorNum="4"/>

<Memory Size="6432055296"/>

<Disk Letter="C:\" Size="106624446464"/>

<BIOS Version="DELL   - 1"/>

<TpmDevice Id="0"/>

<SSAProfile Version="5.0.0" SerialNumber="DF71-10/20/2010 14:32:48 841"/>

<SSAIDS Version="" SerialNumber=""/>

<Deuce Signature="100313002"/>

<SSAUTC Bias="480"/>

<DNSs><DNS Address="10.1.2.240"/></DNSs>

<SSANICs><SSANIC Ip="10.1.2.244" Mac="f0-4d-a2-00-46-35" Gateway="10.1.2.1" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>

</SSAHostInfo>

<RebootRequired Status="0"></RebootRequired>

<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>

</SSAInfo>

]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="4C5233330A0102F40053FF8937DAC3BC" ComputerID="0A2520C30A0102F40053FF8983B22A94" HardwareKey="E395AD7072470FA4BE9F711474732CCC" GroupID="DF71F3140A0102F40067692E98CD6670">

<SSAHostInfo>

<Memory Free="4669587456"/>

<Disk Letter="C:\" Free="77550534656"/>

</SSAHostInfo>

</SSAInfo>

]]></Data></TechID></SESAgentOpState>
10/22 10:34:43 [6012] ************CSN=485
10/22 10:34:43 [6012] <mfn_MakePostUrl:>Request is: action=192&hostid=4C5233330A0102F40053FF8937DAC3BC&chk=7308C04D9BBA9774CECAEE98682421B1&ck=9D62BF7F8D8AA7FFD448C6474165505C&uchk=38854544E2C15BC382C23D2829937466&uck=FCC81D3B07940333A6B27F4E25D59165&as=485&cn=[hex]417274536572766572&lun=[hex]6F7065726174696F6E73&udn=[hex]5733444F4D41494E2E434F4D
10/22 10:34:43 [6012] <mfn_PostAgentInfo>http://10.1.2.244:8014/secars/secars.dll?h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
10/22 10:34:43 [6012] <mfn_PostAgentInfo>POST the total size=1412
10/22 10:34:43 [6012] <mfn_PostAgentInfo>Done with return code = 200
10/22 10:34:43 [6012] <IndexHeartbeatProc>===UPLOAD STAGE===
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
10/22 10:34:43 [6012] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
10/22 10:34:43 [6012] <PrepareEventLog>initialized technology extension processing ok
10/22 10:34:43 [6012] <CalcEventLogIndex>Need to send Event Log Type(0) from id 32 to 41
10/22 10:34:43 [6012] <PrepareEventLog>Allow total logs to send=10
10/22 10:34:43 [6012] <PrepareEventLog>nSecurityRecordsTotal=0
10/22 10:34:43 [6012] <PrepareEventLog>nSecurityRecordsToSend=0
10/22 10:34:43 [6012] <PrepareEventLog>nSystemRecordsTotal=10
10/22 10:34:43 [6012] <PrepareEventLog>nSystemRecordsToSend=100
10/22 10:34:43 [6012] <PrepareEventLog>nTrafficRecordsTotal=0
10/22 10:34:43 [6012] <PrepareEventLog>nTrafficRecordsToSend=0
10/22 10:34:43 [6012] <PrepareEventLog>nRawRecordsTotal=0
10/22 10:34:43 [6012] <PrepareEventLog>nRawRecordsToSend=0
10/22 10:34:43 [6012] <PrepareEventLog>nProcessRecordsTotal=0
10/22 10:34:43 [6012] <PrepareEventLog>nProcessRecordsToSend=0
10/22 10:34:43 [6012] <PrepareEventLog>nLANSensorRecordsTotal=0
10/22 10:34:43 [6012] <PrepareEventLog>nLANSensorRecordsToSend=0
10/22 10:34:43 [6012] <PrepareEventLog>nTechExtensionRecordsTotal=0
10/22 10:34:43 [6012] <PrepareEventLog>nTechExtensionRecordsToSend=0
10/22 10:34:43 [6012] <MakeSystemLog>The size of SYSTEM event logs is 4145.
10/22 10:34:43 [6012] <SyLink>The size of SYSTEM event logs is 4145.
10/22 10:34:43 [6012] <MakeSecurityLog>Attached total 0 bytes SECURITY event logs.
10/22 10:34:43 [6012] <MakeTrafficLog>Attached total 0 bytes TRAFFIC event logs.
10/22 10:34:43 [6012] <MakeRawTrafficLog>Attached total 0 bytes RAW TRAFFIC event logs.
10/22 10:34:43 [6012] <MakeProcessLog>Attached total 0 bytes process event logs.
10/22 10:34:43 [6012] <IndexHeartbeatProc>===COMPRESS EVENT LOG STAGE===
10/22 10:34:43 [6012] <IndexHeartbeatProc>===SEND EVENT LOG STAGE===
10/22 10:34:43 [6012] ************CSN=486
10/22 10:34:43 [6012] <mfn_MakePostUrl:>Request is: action=195&hostid=4C5233330A0102F40053FF8937DAC3BC&chk=7308C04D9BBA9774CECAEE98682421B1&ck=9D62BF7F8D8AA7FFD448C6474165505C&uchk=38854544E2C15BC382C23D2829937466&uck=FCC81D3B07940333A6B27F4E25D59165&groupid=0A9DFE140A0102F40116703AD2D23100&as=486&cn=[hex]417274536572766572&lun=[hex]6F7065726174696F6E73&udn=[hex]5733444F4D41494E2E434F4D
10/22 10:34:43 [6012] <SendEventLogToServer>http://10.1.2.244:8014/secars/secars.dll?h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
10/22 10:34:43 [6012] <SendEventLogToServer>eventlog-->SMS, size=911
10/22 10:34:43 [6012] <SendEventLogToServer>uploads the eventlog to server, size=911
10/22 10:34:43 [6012] <SendEventLogToServer>Query return code = 200
10/22 10:34:43 [6012] <SendEventLogToServer>EventLog-->SEM DONE!
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_SERVER_EVENT_LOG_SENT
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0
10/22 10:34:43 [6012] <IndexHeartbeatProc>Communication Mode=0(Push Mode)
10/22 10:34:43 [6012] <IndexHeartbeatProc>Enter Push Session
10/22 10:34:43 [6012] <IndexHeartbeatProc>Setting the session timeout on Profile Session (for MaintainPushConnection) to 320000
10/22 10:34:43 [6012] <MaintainPushConnection:>Push Connecton!
10/22 10:34:43 [6012] ************CSN=487
10/22 10:34:43 [6012] <mfn_MakeGetPushUrl:>Request is: action=128&hostid=4C5233330A0102F40053FF8937DAC3BC&chk=7308C04D9BBA9774CECAEE98682421B1&ck=9D62BF7F8D8AA7FFD448C6474165505C&uchk=38854544E2C15BC382C23D2829937466&uck=FCC81D3B07940333A6B27F4E25D59165&groupid=0A9DFE140A0102F40116703AD2D23100&mode=0&as=487
10/22 10:34:43 [6012] <MaintainPushConnection:>http://10.1.2.244:8014/secars/secars.dll?h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
10/22 10:35:35 [5000] <CExpBackoff::CExpBackoff()>
10/22 10:35:35 [5000] </CExpBackoff::CExpBackoff()>
10/22 10:35:35 [5000] SyLinkCreateConfig => Created instance: 0000000003B435C0
10/22 10:35:35 [5000] Importing ConfigObject: 0000000003C87AA0 into: 0000000003B435C0
10/22 10:35:35 [5000] <LUThreadProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 0000000003B435C0
10/22 10:35:35 [5000] <CRandomDelay::CRandomDelay()>
10/22 10:35:35 [5000] Random delay window: 0hour 5min 0sec
10/22 10:35:35 [5000] Computed random delay:0hour 0min 27sec 0millisec
10/22 10:35:35 [5000] </CRandomDelay::CRandomDelay()>
10/22 10:35:35 [5000] <LUThreadProc>Waiting for: 27000 milliseconds to start downloading LU contents
10/22 10:35:39 [5540] <CSyLink::mfn_DownloadNow()>
10/22 10:35:39 [5540] </CSyLink::mfn_DownloadNow()>
10/22 10:36:02 [5000] <LUThreadProc>Starting LU download.
10/22 10:36:02 [5000] <SetupTempLUFilePath:>NEW download: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF{1CD85198-26C6-4bac-8C72-5D34B025DE35}1010210491.TMP
10/22 10:36:02 [5000] <CHttpFileDownload::CHttpFileDownload()>
10/22 10:36:02 [5000] </CHttpFileDownload::CHttpFileDownload()>
10/22 10:36:02 [5000] <CHttpFileDownload::Do()>
10/22 10:36:02 [5000] <CHttpFileDownload::getRemainingBytesToDownload()>
10/22 10:36:02 [5000] Remaining bytes to download: 97101008
10/22 10:36:02 [5000] </CHttpFileDownload::getRemainingBytesToDownload()>
10/22 10:36:02 [5000] <CHttpConnector::SendRequest()>
10/22 10:36:02 [5000] Request> http://10.1.2.244:8014/content/{1CD85198-26C6-4bac-8C72-5D34B025DE35}/101021049/Full.zip
10/22 10:36:02 [5000] </CHttpConnector::SendRequest()>
10/22 10:36:02 [5000] <CHttpFileDownload::read()>
10/22 10:36:02 [5000] </CHttpFileDownload::read()>
10/22 10:36:02 [5000] </CHttpFileDownload::Do()>
10/22 10:36:02 [5000] <LUDownloader::GetContentToFile> completed.
10/22 10:36:02 [5000] <CHttpFileDownload::~CHttpFileDownload()>
10/22 10:36:02 [5000] </CHttpFileDownload::~CHttpFileDownload()>
10/22 10:36:02 [5000] <LUThreadProc>@@@@@@@@@ LU DEBUG ONLY- Download file failed due to wrong file size.
 FileName:C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF{1CD85198-26C6-4bac-8C72-5D34B025DE35}1010210491.TMP Expected file size: 97101008
10/22 10:36:02 [5000] <CExpBackoff::Increment()>
10/22 10:36:02 [5000] Backoff index incremented
10/22 10:36:02 [5000] Backoff wait index: 1
10/22 10:36:02 [5000] </CExpBackoff::Increment()>
10/22 10:36:02 [5000] <CExpBackoff::Wait()>
10/22 10:36:02 [5000] CExpBackoff wait time in seconds: 32
10/22 10:36:34 [5000] </CExpBackoff::Wait()>
10/22 10:36:42 [5540] <CSyLink::mfn_DownloadNow()>
10/22 10:36:42 [5540] </CSyLink::mfn_DownloadNow()>
10/22 10:37:34 [5000] SyLinkDeleteConfig => Deleting instance: 0000000003B435C0
10/22 10:37:34 [5000] SyLinkCreateConfig => Created instance: 0000000004706DA0
10/22 10:37:34 [5000] Importing ConfigObject: 0000000003C87AA0 into: 0000000004706DA0
10/22 10:37:34 [5000] <LUThreadProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 0000000004706DA0
10/22 10:37:34 [5000] <CRandomDelay::CRandomDelay()>
10/22 10:37:34 [5000] Random delay window: 0hour 5min 0sec
10/22 10:37:34 [5000] Computed random delay:0hour 3min 20sec 0millisec
10/22 10:37:34 [5000] </CRandomDelay::CRandomDelay()>
10/22 10:37:34 [5000] <LUThreadProc>Waiting for: 200000 milliseconds to start downloading LU contents
10/22 10:37:45 [5540] <CSyLink::mfn_DownloadNow()>
10/22 10:37:45 [5540] </CSyLink::mfn_DownloadNow()>

if your manager gets and updated from LUadmin

then the client on the server should also get updated, coz luall.exe willl run comman

try running repair of the client.should fix the issue.

10/22 10:36:02 [5000] Request> http://10.1.2.244:8014/content/{1CD85198-26C6-4bac-8C72-5D34B025DE35}/101021049/Full.zip

full definition is being asked
10/22 10:36:02 [5000] </CHttpConnector::SendRequest()>
10/22 10:36:02 [5000] <CHttpFileDownload::read()>
10/22 10:36:02 [5000] </CHttpFileDownload::read()>
10/22 10:36:02 [5000] </CHttpFileDownload::Do()>
10/22 10:36:02 [5000] <LUDownloader::GetContentToFile> completed.
10/22 10:36:02 [5000] <CHttpFileDownload::~CHttpFileDownload()>
10/22 10:36:02 [5000] </CHttpFileDownload::~CHttpFileDownload()>
10/22 10:36:02 [5000] <LUThreadProc>@@@@@@@@@ LU DEBUG ONLY- Download file failed due to wrong file size.

this is the error, cannot get any specific document that shows this error message
 

I ran the repair but have the same results.

Has anybody delt with the error listed in Pete_4u2002's post?

It seems crazy that the client on the server that has the enpoint manager wont work.

let know if this helps

http://www.symantec.com/business/support/index?page=content&id=TECH103176&locale=en_US

I followed the instructions on the tech10317 page.  Now the green dot for the client is gone in the manager and I still have the red circle on the client.

I rebooted to see if that made any difference.  The green dot is back in the manager, but the client shield still has a red circle

does the ASEP client still says definition out of date?

if yes, open a support case with Symantec Technical Team as well.

Look like some virus def corruption.Try this 

How to clear corrupt Virus Definitions from SEPM

I have un-installed the client and reinstalled the client.  Still no go.  The policy numbers are different on the manager and client.  I guess I will have to open a support case.  This has been very frustrating.  If this was my first experience with Symantec, I think i would switch to their competition!

Its always good to open a Support Case with Symantec in complicated issues as too many steps can be done at once and Logs can be pulled and reviewed at the same time..