Endpoint Protection

Hi All,

           I think I may a problem and I am hope that someone can help me. I am sure I have SONAR checked and working. I used to get logs for it quite a bit. For the past few of months there have only been 3 log entries I can view in Monitors > Logs > SONAR

Is there some where I can check to make sure my log settings are correct?

SEPM version 12.1.5(12.1.RU5) build 5337 (12.1.5337.5000)

SQL server for Logs database

Thanks

PaulC

Please see here for SONAR as you can test ot's functionality

How to test SEP 12.1 components for functionality

Download the Socar.exe test file to verify that SONAR works correctly

In the AV policy, go to the SONAR tab. Make sure the check box to enable it is checked. Also you can edit other options as needed.

Hi Brian,

              Thanks for the info above. So every test works except SONAR. The SEP client shows that SONAR is installed in the client as:-

SONAR Framework          8.0.0.137

SONAR Engine                 9.2.1.8

SONAR Defs                      150625011

Could I have I missed any log settings in the SEP Manager. Or do you have any recommendations how to get it working again. Everything seems to be set correctly, I think...

PaulC

Is SOCAR not being detected?

Did you verify Proactive Threat Protection is installed as one of the components?

Aside from that it should be it.

Additionally you can download and run the symhelp tool to do error checking.

Troubleshooting computer issues with the Symantec Help support tool

Hi,

There isn't any particular settings except SEPM --> Admin --> Servers --> Localhost --> Edit database propertied --> Log settings --> Client log settings. Also can repair the Symantec Endpoint Protection Manager (SEPM). Perform repair through add/remove programs, select SEPM component and click on repair.

Make sure clients showing SONAR enabled in the console, go to SEPM --> Clients --> View (Protection Technology) --> SONAR status should be enabled.

Thank you Chetan. I will also check your suggestions as well.

Is there any update?