Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Endpoint Security

Created: 06 Dec 2011 | 6 comments
JPCnet's picture
0 0 Votes
Login to vote

Good Afternoon,

I am having an issue with endpoint protection. Every time I try to update a client computer or the servers I get an error stating that endpoint has requested new definitions from the management server and that the prompt will disappear after the server responds and the update is complete. As you can assume this window never disappears and never gives an error it just sits and waits. I have tried rebooting servers and clients with no sucess. When I booted the server an error message was displayed regarding SNAC.exe. I have attached images below of the errors I am recieving. Please help!

 

Regards,

Jason

 

 

http://imgur.com/vWa6X

 

http://imgur.com/a6wxr

Comments

Vikram Kumar-SAV to SEP's picture
06
Dec
2011
0 Votes 0
Login to vote
Swapnil's picture
06
Dec
2011
0 Votes 0
Login to vote

Are you using SNAC Symantec

Are you using SNAC Symantec network access ? with Sep ?

If no go to add remove programs \ select sep \ change\modify\repair

follow the instruction and check .

Swapnil

SOC Team .

Please don't forget to mark your thread solved with whatever answer helped you.

Jeremy.L's picture
06
Dec
2011
2 Votes +2
Login to vote

Hi JPCNet,    First off, from

Hi JPCNet,

   First off, from that error message, you are running SEP 11.0 MR3
This is a fairly old build and you may want to upgrade (especially for the SNAC.EXE crash issue)

A few questions :

- Are you actively using Network Access Control?
- The client may request new definitions from the SEPM but if this one does not have any more recent definitions, it will not be able to update from it.
Please check in the SEPM Console, in Admin => Servers => local site => TASK : Show Liveupdate Download what is the latest AV definitions in the SEP manager's DB.
- Are the clients communicating with the manager? (Check in the client's GUI => Help and Support / Troubleshooting.

Let us know.

--
Symantec Support
MCSE / CCNA

James-x's picture
06
Dec
2011
0 Votes 0
Login to vote

Hello JPCnet,Assuming that

Hello JPCnet,

Assuming that your SEPM has newer definitions than your SEP client (as Jeremy instructed you to check), then it would be helpful to get a Sylink Debug log from the client so we can see exactly what is happening when the client checks in.

Use the following KB document to enable Sylink Debug logging.

Leave the logging enabled for a couple hours and then attach the log file to this thread.

Regards,

James

The Symantec Endpoint Protection Knowledgebase

Please remember to mark the post which resolved your issue as the solution!

Gurupreet's picture
06
Dec
2011
1 Vote -1
Login to vote

upgrade the Endpoint Manager

upgrade the Endpoint Manager to 12.1 or 11.0.7 this should resolve this issue

James-x's picture
07
Dec
2011
2 Votes +2
Login to vote

Gurupreet, Without knowing

Gurupreet,

Without knowing the cause of the issue the customer is facing, we should not recommend an upgrade of the product (especially to a completely new version, i.e. 12.1).

It's little more than a shot in the dark which will take a significant portion of time and effort from the customer and has only a small chance of success.

Regards,

James

The Symantec Endpoint Protection Knowledgebase

Please remember to mark the post which resolved your issue as the solution!