Endpoint Protection

 View Only
  • 1.  Over-deployed problem

    Posted Apr 12, 2012 07:47 AM
      |   view attached

    Hello Symantec users!

     

    Our company is facing a rather annoying problem with Symantec Endpoint Protection. Basically we get spam about being over-deployed twice every day, although, clearly, and as you can see, we are not. We have a total of 160 licenses, where 143 are being used at this very moment. That gives us 16 seats available. See the attached file, or picture below:

     

    Now, we have read quite a few posts about this particular problem, and also tried to fix it with the ideas shared by other users, but to no use. We tried setting the "Delete clients that have not connected for specified time" to 1 day while truncating the database and rebuilding indexes. Obviously we waited one day and then put it back to 30 after that, which is the default value. No change after installing the 12.1 RU version either...

    Still getting the over-deployed messages. Any ideas?

    Many thanks,
    Anders



  • 2.  RE: Over-deployed problem

    Broadcom Employee
    Posted Apr 12, 2012 10:09 AM

    Hi Angrychair,

    Follow these steps, it may help.

    Go to Monitor --> Notifications --> View Notifications --> Notification Conditions -> Delete Over Deployment issue notification

    Create New notification for Over deployment again

    Repair SEPM & Check.

     



  • 3.  RE: Over-deployed problem

    Posted Apr 16, 2012 10:19 AM

    Hello Chetan, and thanks for your reply!

    Sadly though, your suggestion did not help us. It looked good the first couple of hours until the pesky over-deploy message arrived. Have been trying to search for information about this matter, and other solutions, but internet is smaller than I first thought. Well, at least when it comes to Symantec over-deployed messages.

     

    If you have another great tip, please let us know!

    Much appreciated,

    Anders



  • 4.  RE: Over-deployed problem

    Posted Apr 16, 2012 10:42 AM

     

    I believe this is in the SEP enterprise forum. Someone can move this to SEP SMB for better visibility.



  • 5.  RE: Over-deployed problem

    Broadcom Employee
    Posted Apr 16, 2012 10:42 AM

    Hi Anders,

    Could you please try to repair SEPM from original setup files.

    Follow the same steps and reapir with original setup files.



  • 6.  RE: Over-deployed problem

    Posted Apr 19, 2012 04:06 AM
      |   view attached

    Hello,

    We've tried that, and I can sadly report that it did not help us. Some of our computers are offline, some haven't had their virus definitions updated in a long time (since february), because of the "over-deployed" status. But it feels like, when we put "Delete clients that have not connected for specified time" to 1 day, that the database is not being updated at all when offline computers pass that specific time.


    We obtained this summary report yesterday evening. 76 installed clients overall, and we have 80 licenses (see the first post). Math is not my strong side, but that should give us 4 seats over.
    Personally, I think the only solution would be to start all over. New server and everything. But that's out of the question for now. Any other ideas?

     

    Much appreciated,
    Anders



  • 7.  RE: Over-deployed problem

    Broadcom Employee
    Posted Apr 19, 2012 04:40 AM

    Hi Anders,

    Could you please confirm SEPM version ?



  • 8.  RE: Over-deployed problem

    Posted Apr 23, 2012 06:39 AM

    Hello!

    We have SEPM version: 12.1.1000.157 RU1

    Is there a log or report that we can run and share, with loads of data, that you might be able to read and get an answer from? There must be some kind of way to troubleshoot this...

     

    Thanks,
    Anders



  • 9.  RE: Over-deployed problem

    Broadcom Employee
    Posted Apr 23, 2012 07:17 AM

    Hi Angrychair

    Are there any duplicate clients showing in the console, or is there AD integration with computers and users?

    http://www.symantec.com/business/support/index?page=content&id=TECH163349

    Run SEP support tool (SST) by selecting load point analysis option.

    Save the full report and share with us.

    http://www.symantec.com/business/support/index?page=content&id=TECH105414

     



  • 10.  RE: Over-deployed problem

    Posted Apr 26, 2012 03:23 AM
      |   view attached

    Hi,

    Both yes and no. There have been clones of some clients in the client list before. We simply removed the ones that were offline, and everything seemed to be fine. However, I ran the SEP Support Tool and read most of the report, and I can't see any problems there. But you're the experts in this area, so I'll attach the .sdbz-file for you to enjoy.

    We're suspecting faulty information in the database, that we're stuck with wrong data. What if those clones, or ducplicated clients, are still counted in although we cannot see them in the list? If so, is there a way to clean, or perhaps synchronize, the database with our current setup/clients?

    As always, thanks for your time!
    Anders

    Attachment(s)