Endpoint Protection

Client machine is not showing online , the Green icon is not apperaring in SEP client , Client machine is updated with latest defination, working ok bot not showing online at client machine and SEPM Server as well.

If you open the client and click the Help and Support button, then select Troubleshooting does it show "server offline" or "self managed" for the server line?

If it shows "self managed" this client needs to have a sylink dropped on it. The following document explains how to perform this.

http://www.symantec.com/business/support/index?page=content&id=TECH104010&locale=en_US

If it shows "server offline" then the client is having issues communicating with the SEPM server. Sylink debug logging will generally provide an explanation as to the communication failure. The document link below explains how to enable this logging. You can post a copy of the log here for assistance with review.

http://www.symantec.com/business/support/index?page=content&id=TECH104758&locale=en_US

1. HKCU\SOFTWARE\Microsoft\Windows\Currentversion\Internet settings Click on the internet setting key check for the keys called "ProxyEnable" if it is set to 1 then change it to 0 also check if there is a registry value called "GlobalUserOffline" if it is present change the value of the DWORD to 0

2. Now expand Internet settings key and take a backup of the Connections key, delete the entire key
 
3. Check HKU\.Default\SOFTWARE\Microsoft\Windows\Currentversion\Internet settings Click on the internet setting key check for the keys called "ProxyEnable" if it is set to 1 then change it to 0 also check if there is a registry value called "GlobalUserOffline" if it is present change the value of the DWORD to 0
 
4. Expand "Internet settings" key and take a backup of the Connections key, delete the entire key

5. Restart smc

Start >> Run >> smc -stop

wait 15 seconds

Start >> Run >> smc -start

It's really Works but we have 1000 of machines we facing issue

Please suggest

Put in a GPO to set the GlobalUserOffline key to equal 0

i didn't find any key entry like " GlobalUserOffline "

What solution worked for you as you mentioned above?

All aboved mentioed steps but didn't get any  GlobalUserOffline "

Is the client showing "online" in the SEPM or still "offline?"

After the the above steps it's showing online but we  have 1000 machies where we are facing the issue. 

What registry key did you change if GlobalUserOffline was not present?

Proxy enable or the Connections key?

It's also possible only a reboot was needed. Try rebooting a few machines to see what happens.

We had delete the connection Key and change the proxy value only

I had GPOs applied to fix this issue. Also, upgrading to the latest version corrected it. I usually ran into this on 11.0.4 and 11.0.5.

 Using Telnet to test the connectivity to the management server

You can use Telnet to test the connectivity to the IIS server on the management server. If the client can Telnet to the management server's HTTP or HTTPS port,
the client and the server can communicate. The default HTTP port is 8014 (80 for the earlier builds of SEP); the default HTTPS port is 443.

Note: You might need to adjust your firewall rules so that the client computer can Telnet into the management server.

For more information about the firewall, see the Administration Guide for Symantec Endpoint Protection and Symantec Network Access Control.

To use Telnet to test the connectivity to the management server
• • 1. On the client computer, make sure the Telnet service is enabled and started.
    2. Open a command prompt and enter the Telnet command. For example:
       
       telnet ip address 8014
       
       where ip address is the IP address of the management server.
  
  
If the Telnet connection fails, verify the client's DNS service and check its routing path.

Verify the Windows Firewall is not enabled on the management server (SEPM) or the client.

Windows Server 2003:
Use the netsh command line to disable the firewall:

netsh firewall set opmode mode = disable

Windows Server 2008 
Server 2008 uses a profile based approach to the firewall settings. Again, use the netsh command but you will need to specify profile you want to configure (or disable in this case):

netsh advfirewall set <profile><profile> state off</profile> 

Values for <profile> <profile>are as follows:

allprofiles - change the settings for all the profiles.
currentprofile - change the setting for just the current profile.
domainprofile - change the settings for the domain profile.
privateprofile - change the settings for the private profile.
publicprofile - change the settings for the public profile.

If SEPM and it's associated processes (Tomcat, IIS, etc..) are the only applications on this server, we recommend using the "allprofiles" profile for the command line; otherwise choose the appropriate profile.

Windows XP
1. Click Start, click Run, type Firewall.cpl, and then click OK.
2. On the General tab, click Off
3. Click OK.

Windows Vista/Windows 7
Note: The Windows Firewall should be under control of the SEP client, however this is still a good check regardless.

1. Click Start button , Control Panel, Choose Security (System and Security in Windows 7), and then click Windows Firewall.
2. Click Turn Windows Firewall on or off. If you are prompted for an administrator password or confirmation, type the password or provide confirmation.
3. Click Off, and then click OK.</profile>

THNAK YOU SO MUCH FOR THE SOLUTION

Not a problem, please mark as solved if it worked for you so it will benefit others ;-)