Endpoint Protection

Hi,

     Currently having an issue with our current setup. We have 4 SEPM servers that are dispalying the error "A scheduled LiveUpdate(tm) session is running. You cannot run another LiveUpdate session at this time" when we attempt to perform a Download via the management server. Error is causing the automatic download to fail, as the times for the next update end up displaying as an older date (First time showed 14th September, then we saw it happen again this morning, saying the next scan is due on the 24th September.)

Weird thing is if we run luall.exe the download will run fine so clients can still get update, but it's something we shouldn't have to do. Also seem to be seeing an "Unexpected Server error" in the Admin > Servers logs at the bottom on the screen.

Setup goes through a proxy to a LUAserver, but other domains that use this setup are unaffected and run fine.

Please run the symdiag tool to see if it shows anything additional:

Download SymDiag to detect Symantec product issues

Also, you can check the scm-server-0.log file for errors

The symdiag tool has come back with nothing so I've gone in and checked the scm-server-0.log

Seeing a log of;

THREAD 586799 SEVERE: java.sql.SQLException: Connection is closed

I understand that this is quite common in the folder version of the application (Build is currently 12.1 RU2) and is removed in later builds

We're also seeing this from time to time;

THREAD 672244 java.io.FileNotFoundException <DrivePatch>:\Program Files (x86)\Symantec Endpoint Protection Manager\dada\outbox\agent\6FCFB2620A4D142C01226E5AB271636C\index2.dax.sig (The process cannot access the file becasue it is being used by another process)

We're in the process of trying to get upgrades to the servers but red tape and all that...

You mentioned red tapes... but are you allowed to reboot the server? If so, I'd suggest that you try it on one server. If this worked, reboot the other servers.

I had that previously where a file was 'locked' so it was not able to be updated and a reboot resolved it. So, it's worth trying.

Currently in the process of getting approval for a restart and to apply a scheduled scan temporary fix. Not sure if this is conneected, but from the Admin > Servers viewer, one of our 4 servers is showing as Offline, when its the box I'm currently logged in as.