Endpoint Protection

hi everybody,

i have seen that more people then just me had this problem. i read and understood the solution which seem to work for most people.unfortunately it isnt working for me as i dont have the the file on my computer at all, so i cant copy it anywhere.

i installed my sepm on 13. jan and it worked fine till yesterday. since then i receive tons of the faulting messages and cant connect to the server anymore and it is shown offline. when i restart the service, its just sutting down again.

all 4 services are up and running, just the symantec endpoint protection manager service goes down after 2 seconds again.

i am using 12.1 ru1, client is the 12.1.1000.157 ru1

does anyone have another idea what i could do to get it back to work? just a repair from programs and features in the control panel?

thanks in advance

check this link and see if it helps

http://www.symantec.com/business/support/index?page=content&id=TECH140991

unfortunately not, i cant find the libmysql.dl on my server.

can you post the application event logs? and may be screen capture?

Hello,

I agree with pete, could you please upload the screenshot of the Error?

Again, could you also try Either Running a Repair of SEPM 

OR

Run <SEPM  install directory>\bin\Upgrade.bat and check if that resolves the issue.

first of all, thanks for taking care :)

i tried a repair, but it will install new and overwrite the existing database, so i stopped it. its still in testing status, but i have some settings and computers connected already, so i dont want to loose everything as long as i have another chance :)

the upgrade.bat isnt working either. the command window appears for a second then its gone and thats it. no matter if i use it from a command window, running as administrator... but i used it a bit ago and it worked then, so i think it just wont help with this task.

i added screenies and logs from apache folder...

Attachment(s)

error-W. Europe Standard Time.txt   1.47 MB 1 version

reporting.txt   403 KB 1 version

Hello,

I would suggest you to perform the Disaster Recovery for SEPM.

Symantec Endpoint Protection 12.1: Best Practices for Disaster Recovery with the Symantec Endpoint Protection Manager

http://www.symantec.com/docs/TECH160736

Hope that helps!!

hehe, never had to do that before and we are using symantec since version 7.x now. maybe now is a good time to give it a first shot and do it the first time to learn.

Hi,

Could you please attach scm-server-0 log, you will find it under temp folder of root directory.

This file may also give some fruitful information.

sry, its gone already.

what i did now is, create snapshot from vm

then:

uninstall sepm, reboot, reinstall sepm using the restore file. shutdown the sepm, sepm website and database services. copy the old database and database log intot the db folder, then restart all services.

i have all folders and groups back, also all polices i imported from my old symantec server. additionally i can see my clients again and they get updates.

only thing i have to fix now, the clients show the server offline. when i right click the symantec client and go for "update policy", they show me the green connection ball for a second and under "troubleshooting" i can see the server onöine for a second, then they are offline again. this was the client looks like an unmanaged one, but is fully funcrional.

i will try the sylink now, maybe that will change it back...

Ok.....you adopted last option 

Yes to restore client communication you can replace Sylink.xml file & check.

If by replcing sylink.xml didn't help, we would required Sylink.log file to troubleshoot issue further.

Hi,

Just for an update

I could find following fix in SEP 12.1 RU1 notes. In your case you are already using SEP 12.1 RU1.

I would like to know it was an upgrade or fresh install ?

Apache httpd.exe process crashes
Fix ID: 2484177
Symptom: The Apache httpd.exe process crashes every few hours after upgrading from SEP 11.x to SEP 12.1.
Solution: A string was not terminated correctly. The string is now terminated correctly

Reference : http://www.symantec.com/business/support/index?page=content&id=TECH174

good morning everybody,

updates... :)

just import the sylink.xml through the client didnt work. the client got the green dot for a few seconds and shows the server online for a few seconds, then offline again. whenever i update policy client and server are talking. also the clients showing online in the console and receiving updates and policies. so the system is working with some minor issues.

it was a fully new installation, but i imported some liveupdate and antivirus policies to it and assigned them to my groups. they seem to have problems now. i cant change or delete them, the locally installed console will hang then. the console is also hanging when i am trying to create a new group. maybe a problem of copying the database...

i think i have to reinstall the system completely which is not a big problem at all... or do you want to test some more?

ok, removed the "copied database" with the imported settings and rules. now the client are talking to the server correctly. i can add and remove groups and also can create and change policies again.

this way all i lost are the imported rulesets which i have to recreate by hand now. no problem for me, just some more work...

seems to work correctly now, if you have some more questions, just from interest, let me know...

Hi,

I am not sure what method you adopted to restore the databse.

I would like to make you aware that you should use database backup & restore wizard instead of copying database. It's simply not recommended nor supported.

You should alway take backup of SEPM at regular interval.

Symantec Endpoint Protection 12.1: Best Practices for Disaster Recovery with the Symantec Endpoint Protection Manager

i normally do, but as its only for testing at the moment, i didnt care much for a backup.

now its going to become productive, so it will become all necessary backups :)