Endpoint Protection

 View Only
  • 1.  Endpoint Status showing Lots of clients offline multiple times a day

    Posted Aug 05, 2016 03:44 PM

    I'm using the latest version of SEPM. Our design is we have about 350 in the US and 1200 overseas--the people overseas use a GUP.

    For some reason, once or twice a day it shows half our clients are offline (its a mix of us clients and asia clients), but over time they slowly come back online where eventually everything is back online. No sooner than a day later, many of them go back offline according to this status screen. Seems to be recurring. I think it may also occur more than once a day.

    Does this occur when new definitions when pushed out?

    What could possibly be causing this?

     

    180px_Offline Issue.jpg180px_Offline Issue2_0.jpg



  • 2.  RE: Endpoint Status showing Lots of clients offline multiple times a day

    Posted Aug 05, 2016 04:01 PM

    What's happening on the actual endpoint? Is it online but the SEPM shows it offline? What does the status show from the Clients page?



  • 3.  RE: Endpoint Status showing Lots of clients offline multiple times a day

    Posted Aug 05, 2016 04:03 PM

    did you check whether those machines reported offline are actually up and running ? if they are not, then this is a normal behavior.



  • 4.  RE: Endpoint Status showing Lots of clients offline multiple times a day

    Posted Aug 08, 2016 11:20 AM

    Most of these clients are still online. I've even taken this list of "offline" clients, and ran them through pinginfoview (pings everything and shows status). More than half are still online.

     

    What's odd is almost ALL clients will show offline then the status will slowly trickly them back showing they are offline. Almost like there is something timed occuring disconnecting their communication.



  • 5.  RE: Endpoint Status showing Lots of clients offline multiple times a day

    Posted Aug 08, 2016 11:33 AM
    We're these imaged machines by chance?


  • 6.  RE: Endpoint Status showing Lots of clients offline multiple times a day

    Posted Aug 08, 2016 02:24 PM

    I had the same issue with a remote site that I could not keep all the computers in an online status. This drove my ticketing system crazy because of outdated signatures, when the signatures were up to date but just not reporting the fact.

    After numerous calls with Symantec support, I finally bit the bullet and installed a remote SEPM. Once I pushed the new Sylink file to each computer, there has been 100% online rate from those previously intermitent computers. Should have done that months ago.

    I'm convinced it has something to do with the networking between the remote site and the local SEPMs. Maybe the heartbeat, etc. Since this was essentially a network fix and not a Symantec fix, the Symantec support folks won't be much help. There was nothing wrong with my Symantec installs.