Endpoint Protection Small Business Edition

Hey Guys,

Anyone know why it says Unsupported OS type in SEPM whenever i pull a log on the Linux severs with SAV?

Thanks,

can you post the screen captue please?

may be ..Symantec Antivirus for Linux (SAV for Linux, SAVFL) Auto-Protect is either not installed or the Auto-Protect modules are not compatible with the current OS kernel version.. can you check..

have you recompiled AP for these Linux client?

Yes the Autoprotect is disabled, even after I install it. do you guarantee that if the autoprotect is enabled it will show up?

Thanks,

Hi,

We installed it on a Linux with SAVAP running, still the same result.

is it the supported Kernel version as per the system requirement? or is it the one that has been compiled manually?

it is in the supported list. Not compiled

can you please post the screen capture?

Here is the screenshot

the AP shows disabled from the picture. can you make it enabled and then check?

Hi,

Thank you for posting in Symantec community & do apologize for the late reply.

I believe it's by design at this point.I tried to find out public Kb stating the same but couldn't get any success.

Hi,

I could find following info in the text file attached to this article: http://www.symantec.com/docs/DOC3474

Filenames that include some special characters ('?', '"', '\n') cannot be displayed correctly in the Symantec Endpoint Protection Manager console. - Filtering Linux Data in the Symantec Endpoint Protection Manager Console across platforms.   Symptom: The OS version for Linux clients shows up as "unsupported," "unknown," or "blank.

SAV for Linux Reporter uses the Symantec Endpoint Protection Manager legacy reporting channel, which cannot upload OS-related information in the current interface. You may filter Linux clients from Windows or Mac clients in Symantec Endpoint Protection Manager by using the Domain Name in the console. This may be done by configuring the Server Group in the Reporter. The detailed instructions are as following:

  1. Open the /etc/reporterd.ini configuration file on the SAVFL Reporter client.
  2. Under the Reporting section of the reporterd.ini file, change the ServerGroup parameter to the desired group. By default, this parameter is set to "Symantec AntiVirus for Linux".
  3. In the Symantec Endpoint Protection Manager console, select the type of log to view and then click Advanced Settings.
  4. Fill in the Domain filter setting and click Save Filter, give it a name, and then click OK.
  5. Click View Log using this filter to see the specified ServerGroup clients' log data.

Hi Chetan,

Actually this is on the Implementation guide's known issues. I already did this. And it didint work too.

Thanks,

are there other clients where AP is running however it still shows unsupported?

Yes even with the linux with AP running, the OS Type is still not visible on the SEPM.

i would suggest to open a support case.

Hi,

I think it will show as a unsupported only. You can give request for product enhancement, SEP for linux may release next year & we can expect this fix into it.

Hi Chetan,

I think that's the best thing I can do for now.

Thanks,