Endpoint Protection

my client is not communicating with server and in help&support-->troubleshooting.  server is showing offline

 i have found the problem and i have some doubt 

in our company we are using 12 vlan

client which is not connecting with server and when i am changing the vlan of the client to another vlan then the updation taking place immediately in the client.

this problem taking place in 4 vlan clients and remaining 8 vlan clients have no problem.

i dont know what to do can u  give me some ideas

kindly contact network team and open the firewall port 8014 ,80.

check this ports are using in sep 11.

Solution:

Port Number Port Type Initiated by Listening Process Description 80, 8014 TCP SEP Clients svchost.exe (IIS) Communication between the SEPM manager and SEP clients and Enforcers. (8014 in MR3 and later builds, 80 in older). 443 TCP SEP Clients svchost.exe (IIS) Optional secured HTTPS communication between a SEPM manager and SEP clients and Enforcers. 1433 TCP SEPM manager sqlservr.exe Communication between a SEPM manager and a Microsoft SQL Database Server if they reside on separate computers. 1812 UDP Enforcer w3wp.exe RADIUS communication between a SEPM manager and Enforcers for authenticating unique ID information with the Enforcer. 2638 TCP SEPM manager dbsrv9.exe Communication between the Embedded Database and the SEPM manager. 8443 TCP Remote Java or web console SemSvc.exe HTTPS communication between a remote management console and the SEPM manager. All login information and administrative communication takes place using this secure port. 9090 TCP Remote web console SemSvc.exe Initial HTTP communication between a remote management console and the SEPM manager (to display the login screen only). 8005 TCP SEPM manager SemSvc.exe The SEPM manager listens on the Tomcat default port. 39999 UDP Enforcer Communication between the SEP Clients and the Enforcer. This is used to authenticate Clients by the Enforcer. 2967 TCP SEP Clients Smc.exe The Group Update Provider (GUP) proxy functionality of SEP client listens on this port. The Symantec Endpoint Protection Manager (SEPM) use two web servers: Internet Information Services (IIS) and Tomcat. IIS uses port 80 (or 8014) and 443 - Tomcat uses port 9090 and 8443. The communication between IIS and Tomcat uses the HTTP protocol. IIS uses port 9090 to talk to Tomcat, Tomcat uses port 80 to talk to IIS.

troubleshooting steps,

http://www.symantec.com/docs/TECH95789

I remember you cannot pass sylink log, however you can mask the importatmnt information and post it here

Did you monitor after replacing sylink.xml?

i have copied sylink.xml file from server and pasted in client but no solution yet

sepm is using 8443 port.

it uses 8443 port

thats the port used by SEPM manager and console to communicate?

open sylink.xml and mention the port. 

it is not connected to firewall it is connected through local lan.here no firewall included

Hi,

Telnet the communication port from server & client both..

hi Naveen.

are you able to telent server to client and client to server,

if this is not happening kindly check your network team and open the firewall port.