Endpoint Protection

 View Only
  • 1.  SEP 12.1.6 MP3: File Reputation

    Posted Nov 30, 2015 07:38 AM

    When I start the Java-GUI for the SEP-Manager there is on top left the Security-Status area where new notifications are links. I click on "View Notifications" which results in switching to Monitors -> Notifications.

    When there is a "File Reputation Lookup Alert" I run innto a problem:

    If I click on the Report-Icon (or mark the line and the "Details"-link), a new window "Reporting - Log On" opens and asks for credentials  (User name, password and domain). When I use my normal credentials, I will enter the web client at "Reporting Home". Here I can again use the "View Notifications"-Link, followed by a click on the report, but I will be just asked again for credentials in a new window "Reporting - Log On" ...

    So I am not able to view the report as I will always be asked for credentials and then will be directed again to the Start-page "Home".

     

    Any ideas what's going wrong and how to fix it?

     

    It is a SEPM-installation of 12.1.6 MP3 (localized English) running on a Windows 2008 R2 (localized German). The installation started with 12.1.5, patched to 12.1.6, patched to 12.1.6 Mp1a and finaly patched to 12.1.6 MP3



  • 2.  RE: SEP 12.1.6 MP3: File Reputation

    Posted Nov 30, 2015 07:40 AM

    Can you provide a screenshot of this?

    Is it the same as what's mentioned here?

    http://www.symantec.com/docs/TECH98274

    If so you need to perform a repair.



  • 3.  RE: SEP 12.1.6 MP3: File Reputation

    Posted Nov 30, 2015 08:39 AM

    It's not exactly the same as I can use the whole Java-GUI as expected and I can open othe than the "File Reputation Alert"-Reports without any Problem.

    So here are some screenshots:

     

    1.) Login Java GUI (SEPM:9090)

    20151130_01.JPG

    I entered my credentials and passed to the Java-GUI Homescreen (see 2)

     

    2.) Java-GUI Home-Screen

    20151130_02.JPG

    I used the link "View Notifications" marked by the green arrow

     

    3.) Java-GUI View Notification

    20151130_03.JPG

     

    I used the both links to the reports first the one which guides me to 4a, then the FR-Link that results in 4b

     

    4.a) A working report

    20151130_04a.JPG

     

    4.b) The not working link

    20151130_04b.JPG

    I entered my credentials and where guided to 5)

     

    5) Welcome to the web-client :(

    20151130_05.JPG

    I used again the "View Notifications"-Link

     

    6) Notifications in the web client

    20151130_06.JPG

    I clicked again the FR-Report marked with the green arrow

     

    7) And again :(

    20151130_07.JPG

     

    So this is the same situation as given in 4.b, so welcome to the loop ;)

     



  • 4.  RE: SEP 12.1.6 MP3: File Reputation

    Posted Nov 30, 2015 08:41 AM

    Have you tried a repair of the SEPM?



  • 5.  RE: SEP 12.1.6 MP3: File Reputation

    Posted Nov 30, 2015 11:52 AM

    Whats the link you're using to access the second method? 

    Have you tried a different browser?



  • 6.  RE: SEP 12.1.6 MP3: File Reputation

    Posted Dec 01, 2015 02:02 AM

    @Brian:

    Not yet. I've just updated to 12.1.6 MP3 some days ago but dso you think it is reasonable to try a repair although?

     

     

    @Lumia_720:

    I am not sure what you mean.

    I am starting at 1) with the Java-GUI and use the links marked with the green Arrows. I closed Window 4a) by clicking the cross at the top right as I just opened it to show that the reports are openable beside the File Reputation-reports

     

    4b) opens after I use the link of the green arrow marked with 4b. And after I entered my credentials I am directed to 5) which is no longer the Java-Management console - it is now the web-client.

     

    I am not sure, but I think all the web-based windows are opened with MSIE - I use Chrome as default-browser on my workstation, while on the SEPM-server only MSIE is installed only and it looks the same on both computers and the behaviour is the same too. Maybe I could try what happens when I open the GUI from a linux-based PC.

     

     

    Just to make clear what I mean:

    If you open "http://%SEPMANAGER_SERVER%:9090/" there are offered two interface-options:

     

    1.) https://%SEPMANAGER_SERVER%:8443/console/apps/sepm

    This is what I call the Web-Client or Web-GUI

     

    2.) http://%SEPMANAGER_SERVER%:9090/clientpkg/downloadJWS.html

    And this is what I call the Java-GUI or Java-Client.