Endpoint Protection

I installed SEPM 11.0 MR4MP1 on windows 2003 server and found the problems

1. all report type don't have information.
2. In page Home when click the number from viruses in "Action Summary by Detection Count" date in Status Last Updated show 01/01/1970.

Then I upgraded from MR4MP1 to MR4MP2 when upgrade finish the problems are existing.

Could you give me the how to? Thank you

Thank you.
wirawat. 

Can you go into the SEPM > Monitors > logs & check the comuter status report & see what definitions your clients are showing & also the last check in time for your client?

I checked last check status is normally.
As follow

[url=http://www.uppic.net/show/063f93576c29d1e06400f5a07db95008][img]http://www.uppic.net/tp/20090803_105729.jpg[/img][/url]

[url=http://www.uppic.net/show/a1f280932fdd5bda0b32adca5d008f50][img]http://www.uppic.net/tg/20090803_105907.jpg[/img][/url]

thank you.
wirawat

I think its better if you can call the support & open a new case for this because this issue might need some troubleshooting to be done after connecting to the server.

Disable IE Enhanced Security from add remove program -->Add remove Windows component

I did as your reply.

I'm not sure the report is working normally.
Because some type of report don't show information such as report type Risk information is nothing but Home page at Action Summary by Detection Count is show Newly Infected about 1900.
But some report such as computer status have the information.

And a time of "Status Last Update" show 01/01/1970 07:00:00.

thank you.
wirawat.

Could you please tell us with data base you are using. It seems that data is not getting purged properly from the database.As this Status Last Update" show 01/01/1970 07:00:00   was resolved with MR4

Follow the link below to chnage the days to keep the data in the database to 1 from 30.
Changing the log settings to reduce the size of the database.
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008062707405348


Sweeping log data from the database manually

You can manually clear the logs, but this procedure is optional and you do not have to do it.

To sweep log data from the database manually:

1. On the computer where the manager is installed, open a Web browser and type the following URL:
https://localhost:8443/servlet/ConsoleServlet?ActionType=ConfigServer&action=SweepLogs
After you have performed this task, the log entries for all types of logs are saved in the alternate
database table. The original table is kept until the next sweep is initiated.
2 To empty all but the most current entries, perform a second sweep. The original table is cleared and
entries then start to be stored there again.

Dear Prachand,

I'm using embedded database.

"days to keep the data in the database to 1 from 30"
Is this mean the content revision to keep or log limit?

Why I should clear the logs?
"01/01/1970 07:00:00" will be solve, correct?

Thank you.
wirawat 

It is for log limit....Clearing the logs should get rid of  "01/01/1970 07:00:00"

I will try to do that.

regards,
wirawat.

Any update on  it ??

Dear Prachand,

Yesterday, I went to customer site and did follow your reply.
But the problem was occuring.

I look the "Monitors --> Log --> Log type : Scan" don't have the informations.But Log type : Computer status have the informations.
At the "Home --> Security Status --> More Details" alway show scan status "Scan Failures". But the client when view scan log it's scan completed.
I think may be client can't send the log to SEPM.
How I do.

Thank you.
wirawat.

 

I can solve this problem by move all client to new server.
Difficulty is to move the machines to new server because the tool of symantec (sylinkreplacer) it can do but not all client.
I have to use the sylinkdrop move for each client.
however the problem has been solve.