Video Screencast Help

SEP client shows offline and shows online in SEPM console.

Created: 09 Jul 2009 • Updated: 14 Jun 2010 | 38 comments
hemu's picture
This issue has been solved. See solution.

Symantec SEP client shows server offline and shows online in SEPM console also last chakin time is also carrect but police number is not correct please help me to solve this issue.

Comments 38 CommentsJump to latest comment

kajal's picture

copy the sylying file from the sepm console machine and past it sep client machine

Abhishek Pradhan's picture

Delete the client from the SEPM console (Rt. Click the Client, click on Delete in the console).

Then stop and start the SMC service on the affected client, and force it to run a policy update to the server.

If this doesn't help, you'll need to perform a Sylink Drop, or copy the relevant Sylink file for that group from the SEPM and paste it in the installation folder of the affected client.

The following 2 posts should also help you out in the same.

https://www-secure.symantec.com/connect/forums/how-came-back-communications-clients

https://www-secure.symantec.com/connect/forums/update-parent-server-sepm-without-reinstalling-new-installation-package

HTH

Abhishek Pradhan, PMP, MCT
Blog: http://blog.abhishekpradhan.net | SIG Lead - Pune IT Pro (Microsoft Pune User Group) | http://www.puneusergroup.org

pete_4u2002's picture

check the sylink monitor logs , see if it is trying to communicte with SEPM. I believe it is communicating hence green dot as well as last check in time in time. But still check for the sylink logs for more detail

cheers
Pete

hemu's picture

to copy pest sylink works but we cannot go with this as we have distrubuted SEP package to all over branchis and to change packag is not posibel

also pesting sylink logs....
07/10 19:23:10 [6112] Stored HostGUID=7BC113D80AE206AE012CE574D420A646; outlen=16
07/10 19:23:10 [6112] <RestoreSettings>Stored UserGuid=0; outlen=2
07/10 19:23:10 [6112] <mfn_DecodeSSN>Sygate-SSN=2283
07/10 19:23:10 [6112] <mfn_DecodeSSN>Read CSN=2284
07/10 19:23:10 [6112] Product Type=3,Major Ver=5,Minor Ver=2,Platform ID=34,OSType=50659874
07/10 19:23:10 [6112] OS=Windows Server 2003 family Enterprise Edition; number=5.2.3790
07/10 19:23:10 [6112] SyLinkCreateInstance => Instance created: 01D01D48 Registry path: SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK
07/10 19:23:10 [6112] <GetOnlineNicInfo>:Netport Count=1
07/10 19:23:10 [6112] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
07/10 19:23:10 [6112] SyLinkCreateConfig => Created instance: 01D0F538
07/10 19:23:10 [6112] UseNewConfig => Created m_hNewConfig: 01D0F538
07/10 19:23:10 [6112] Importing ConfigObject: 01D00AA8 into: 01D0F538
07/10 19:23:10 [6112] Importing ConfigObject: 01D00AA8 into: 01D0D290
07/10 19:23:10 [6112] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
07/10 19:23:10 [6112] SSA packageType is set as 105
07/10 19:23:10 [6112] SyLinkDeleteConfig => Deleting instance: 01D00AA8
07/10 19:23:10 [6112] <SetHiStatus>HI status is changed to=3; reason=0; rule=Host Integrity check is disabled.
Host Integrity policy has been disabled by the administrator.
07/10 19:23:12 [6112] SyLinkCreateConfig => Created instance: 03BB0680
07/10 19:23:12 [6112] SetCurLocationName: Name is set to - Default
07/10 19:23:12 [6112] SetCurLocationID: ID is set to - EEDFFB760AE206AE00A1C95D29C0D878
07/10 19:23:12 [6112] SyLinkCreateConfig => Created instance: 03B3B938
07/10 19:23:12 [6112] Importing ConfigObject: 03B3B938 into: 01D0F538
07/10 19:23:12 [6112] Importing ConfigObject: 03B3B938 into: 01D0D290
07/10 19:23:12 [6112] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
07/10 19:23:12 [6112] SyLinkDeleteConfig => Deleting instance: 03B3B938
07/10 19:23:13 [6112] SyLinkDeleteConfig => Deleting instance: 03BB0680
07/10 19:23:14 [6112] <CSyLink::Start()>
07/10 19:23:14 [6112] <CSyLink::ImportConfigFile()>
07/10 19:23:14 [6112] </CSyLink::ImportConfigFile()>
07/10 19:23:14 [6112] <GetDomainHostName>msz_DomainName is taken from szDomainName
07/10 19:23:14 [6112] <GetDomainHostName>DomainName (Final)=hbctxdom.com
07/10 19:23:14 [6112] *********Netport Count=1
07/10 19:23:14 [6112] Physical: Local Area Connection::00-06-5b-3b-5c-1a::broadcom netxtreme gigabit ethernet
07/10 19:23:14 [6112] MAC=00-06-5b-3b-5c-1a# Wireless=
07/10 19:23:14 [6112] Hardwire String=00-06-5b-3b-5c-1a#
07/10 19:23:14 [5648] <HeartbeatThreadProc:>Thread is about to begin..
07/10 19:23:14 [2760] Successfully created the heartbeat thread
07/10 19:23:14 [6112] <Start>Started, contact SMS every 3600 seconds
07/10 19:23:14 [6112] <PostEvent>going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED
07/10 19:23:14 [6112] <PostEvent>done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0
07/10 19:23:14 [252] <CExpBackoff::CExpBackoff()>
07/10 19:23:14 [252] </CExpBackoff::CExpBackoff()>
07/10 19:23:14 [5648] <CheckHeartbeatTimer>====== Heartbeat loop starts at 19:23:14 ======
07/10 19:23:15 [6112] <SetClientAuth>Received new User/Domain from SMC.. User: Administrator User Domain: HBSEP11POC
07/10 19:23:15 [6112] <SetClientAuth>Getting RDNS Domain Name (user domain in AD setup)..
07/10 19:23:15 [6112] <GetLoginRdnsDomain>DNS domain=
07/10 19:23:15 [6112] <SetClientAuth>Checking if the new user domain name is the same as Local Host ..
07/10 19:23:15 [6112] <SetClientAuth>HostName=hbsep11poc
07/10 19:23:15 [6112] <SetClientAuth>New User DomainName=hbsep11poc
07/10 19:23:15 [6112] <SetClientAuth>User Domain name is same as Host name .. Setting 'Login Domain' to =LocalComputer
07/10 19:23:15 [6112] <SetClientAuth>Logged in user info set to: LocalComputer/Administrator
07/10 19:23:15 [6112] <SetClientAuth>Marking User Change Notify to redo registration..
07/10 19:23:15 [5648] <GetOnlineNicInfo>:Netport Count=1
07/10 19:23:15 [5648] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
07/10 19:23:15 [4128] SyLinkCreateConfig => Created instance: 01C8E008
07/10 19:23:15 [4128] Importing ConfigObject: 01D0D290 into: 01C8E008
07/10 19:23:15 [4128] SyLinkDeleteConfig => Deleting instance: 01C8E008
07/10 19:23:15 [5648] <CalcAgentHashKey>:CH=5AEE5DC40AE206AE014D9F9F6717E8631hbsep11pochbctxdom.com5A146C8DCD9904840E934D06C7433D5C
07/10 19:23:15 [5648] <CalcAgentHashKey>:CHKey=19AD0AA9694E2F43266CDF7F839C688B
07/10 19:23:15 [5648] <CalcAgentHashKey>:C=5AEE5DC40AE206AE014D9F9F6717E8631hbsep11pochbctxdom.com
07/10 19:23:15 [5648] <CalcAgentHashKey>:CKey=D2720C16A868E874343B810E7AA9CD94
07/10 19:23:15 [5648] <CalcAgentHashKey>:UCH=5AEE5DC40AE206AE014D9F9F6717E8630AdministratorLocalComputerhbsep11pochbctxdom.com5A146C8DCD9904840E934D06C7433D5C
07/10 19:23:15 [5648] <CalcAgentHashKey>:UCHKey=8CA6728FD0CCE3E7B79F618E206B1E2A
07/10 19:23:15 [5648] <CalcAgentHashKey>:UC=5AEE5DC40AE206AE014D9F9F6717E8630AdministratorLocalComputerhbsep11pochbctxdom.com
07/10 19:23:15 [5648] <CalcAgentHashKey>:UCKey=1F1CD88C034A0E7AE90AE0CD0A98DDFF
07/10 19:23:15 [5648] <DoHeartbeat>HardwareID=5A146C8DCD9904840E934D06C7433D5C
07/10 19:23:15 [5648] <DoHeartbeat>CHKey=19AD0AA9694E2F43266CDF7F839C688B
07/10 19:23:15 [5648] <DoHeartbeat>CKey=D2720C16A868E874343B810E7AA9CD94
07/10 19:23:15 [5648] <DoHeartbeat>UCHKey=8CA6728FD0CCE3E7B79F618E206B1E2A
07/10 19:23:15 [5648] <DoHeartbeat>UCKey=1F1CD88C034A0E7AE90AE0CD0A98DDFF
07/10 19:23:15 [5648] <DoHeartbeat> Set heartbeat event
07/10 19:23:15 [5648] Use new configuration
07/10 19:23:15 [5648] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 19:23:15 ======
07/10 19:23:16 [5648] HEARTBEAT: Check Point 1
07/10 19:23:16 [5648] HEARTBEAT: Check Point 2
07/10 19:23:16 [5648] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
07/10 19:23:16 [5648] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
07/10 19:23:16 [5648] HEARTBEAT: Check Point 3
07/10 19:23:16 [5648] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
07/10 19:23:16 [5648] HEARTBEAT: Check Point 4
07/10 19:23:16 [5648] <RegHeartbeatProc>===Registration STAGE===
07/10 19:23:16 [5648] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator
07/10 19:23:16 [5648] <MakeRegisterData:>XML data: <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="5AEE5DC40AE206AE014D9F9F6717E863" AgentType="105" UserDomain="LocalComputer" LoginUser="Administrator" ComputerDomain="hbctxdom.com" ComputerName="hbsep11poc" PreferredGroup="My%20Company%5cHDFC_Global_MR3_Client" PreferredMode="1" HardwareKey="5A146C8DCD9904840E934D06C7433D5C" SiteDomainName=""/>
<SSAHostInfo><NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="hbctxdom.com" HostName="hbsep11poc" HostDesc="" />
<SSAProduct Version="11.0.3001.2224" />
<SSAOS Version="5.2.3790" Desc="Windows%20Server%202003%20family%20Enterprise%20Edition" Type="50659874" ServicePack="Service%20Pack%202"/>
<Processor ProcessorType="x86%20Family%206%20Model%2011%20Stepping%204" ProcessorClock="1396" ProcessorNum="2"/>
<Memory Size="2146910208"/>
<BIOS Version="DELL%20%20%20-%201"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="AAC0-12%2f04%2f2008%2020%3a04%3a32%20750"/>
<SSAIDS Version="" SerialNumber=""/>
<SSAUTC Bias="-330" />
<DNSs><DNS Address="202.54.1.18"/><DNS Address="202.54.1.30"/></DNSs>
<SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
</SSAHostInfo>
</SSARegData>
07/10 19:23:16 [5648] <SyLink>[MakeRegisterData] registration Hardware Key=5A146C8DCD9904840E934D06C7433D5C
07/10 19:23:16 [5648] ************Reg CSN=1
07/10 19:23:16 [5648] <mfn_GenPostData (for Registration):>Request is: s_origin_length: 1279
s_session_id: 5A146C8DCD9904840E934D06C7433D5C
Sygate-SSN: 1
<?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="5AEE5DC40AE206AE014D9F9F6717E863" AgentType="105" UserDomain="LocalComputer" LoginUser="Administrator" ComputerDomain="hbctxdom.com" ComputerName="hbsep11poc" PreferredGroup="My%20Company%5cHDFC_Global_MR3_Client" PreferredMode="1" HardwareKey="5A146C8DCD9904840E934D06C7433D5C" SiteDomainName=""/>
<SSAHostInfo><NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="hbctxdom.com" HostName="hbsep11poc" HostDesc="" />
<SSAProduct Version="11.0.3001.2224" />
<SSAOS Version="5.2.3790" Desc="Windows%20Server%202003%20family%20Enterprise%20Edition" Type="50659874" ServicePack="Service%20Pack%202"/>
<Processor ProcessorType="x86%20Family%206%20Model%2011%20Stepping%204" ProcessorClock="1396" ProcessorNum="2"/>
<Memory Size="2146910208"/>
<BIOS Version="DELL%20%20%20-%201"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="AAC0-12%2f04%2f2008%2020%3a04%3a32%20750"/>
<SSAIDS Version="" SerialNumber=""/>
<SSAUTC Bias="-330" />
<DNSs><DNS Address="202.54.1.18"/><DNS Address="202.54.1.30"/></DNSs>
<SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
</SSAHostInfo>
</SSARegData>
07/10 19:23:16 [5648] <SendRegistrationRequest:>http://10.226.6.174:801V–¤l óó7D#‹‚;¬ƒîp Ñ^h‘#î@SXìï Ús>š§0°²òWtÛØÄŠ¢È¡ËÀðÁÆ´^=FØ–Žã†¤ ¦H@=÷ÈöñAOʲ3ðÀ’¥›g(÷wè¨EØ„q»È¤$‹c`Œ%ï1—*+Œ1f­;üÑ
êAÖ¾™8Ží1»s“¥5»ý7O¸=&Wó„b“%AdAv#j§bA^l?(¿@¥èø‘GÞ|×=úºj¦,Àj€
¯ÇNC}€—Ò»õ*8-—Ïr¦UÖŸ°lØv—Àµ”›Ò\¢ýÕÑ¢P#¤iãgÓúm¥;¡kó
07/10 19:23:16 [5648] 19:23:16=>Send HTTP REQUEST
07/10 19:23:16 [5648] 19:23:16=>HTTP REQUEST sent
07/10 19:23:16 [5648] 19:23:16=>QUERY return code
07/10 19:23:16 [5648] 19:23:16=>QUERY return code completed
07/10 19:23:16 [5648] <SendRegistrationRequest:>SMS return=468
07/10 19:23:16 [5648] <ParseHTTPStatusCode:>468=>468 Request not allowed
07/10 19:23:16 [5648] <SendRegistrationRequest:>Content Lenght => 48
07/10 19:23:16 [5648] <mfn_DecodeSSN>Sygate-SSN=1677
07/10 19:23:16 [5648] <mfn_DecodeSSN>Read CSN=1678
07/10 19:23:16 [5648] HTTP returns status code=468
07/10 19:23:16 [5648] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
07/10 19:23:16 [5648] <SendRegistrationRequest:>COMPLETED
07/10 19:23:16 [5648] HEARTBEAT: Check Point 5.1
07/10 19:23:16 [5648] <RegHeartbeatProc>switch to another server
07/10 19:23:16 [5648] HEARTBEAT: Check Point 9
07/10 19:23:16 [5648] HEARTBEAT: Check Point 8
07/10 19:23:16 [5648] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
07/10 19:23:16 [5648] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
07/10 19:23:17 [5648] HEARTBEAT: Check Point 1
07/10 19:23:17 [5648] HEARTBEAT: Check Point 2
07/10 19:23:17 [5648] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
07/10 19:23:17 [5648] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
07/10 19:23:17 [5648] HEARTBEAT: Check Point 3
07/10 19:23:17 [5648] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
07/10 19:23:17 [5648] HEARTBEAT: Check Point 4
07/10 19:23:17 [5648] <RegHeartbeatProc>===Registration STAGE===
07/10 19:23:17 [5648] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator
07/10 19:23:17 [5648] <MakeRegisterData:>XML data: <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="5AEE5DC40AE206AE014D9F9F6717E863" AgentType="105" UserDomain="LocalComputer" LoginUser="Administrator" ComputerDomain="hbctxdom.com" ComputerName="hbsep11poc" PreferredGroup="My%20Company%5cHDFC_Global_MR3_Client" PreferredMode="1" HardwareKey="5A146C8DCD9904840E934D06C7433D5C" SiteDomainName=""/>
<SSAHostInfo><NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="hbctxdom.com" HostName="hbsep11poc" HostDesc="" />
<SSAProduct Version="11.0.3001.2224" />
<SSAOS Version="5.2.3790" Desc="Windows%20Server%202003%20family%20Enterprise%20Edition" Type="50659874" ServicePack="Service%20Pack%202"/>
<Processor ProcessorType="x86%20Family%206%20Model%2011%20Stepping%204" ProcessorClock="1396" ProcessorNum="2"/>
<Memory Size="2146910208"/>
<BIOS Version="DELL%20%20%20-%201"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="AAC0-12%2f04%2f2008%2020%3a04%3a32%20750"/>
<SSAIDS Version="" SerialNumber=""/>
<SSAUTC Bias="-330" />
<DNSs><DNS Address="202.54.1.18"/><DNS Address="202.54.1.30"/></DNSs>
<SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
</SSAHostInfo>
</SSARegData>
07/10 19:23:17 [5648] <SyLink>[MakeRegisterData] registration Hardware Key=5A146C8DCD9904840E934D06C7433D5C
07/10 19:23:17 [5648] ************Reg CSN=1679
07/10 19:23:17 [5648] <mfn_GenPostData (for Registration):>Request is: s_origin_length: 1279
s_session_id: 5A146C8DCD9904840E934D06C7433D5C
Sygate-SSN: 1679
<?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="5AEE5DC40AE206AE014D9F9F6717E863" AgentType="105" UserDomain="LocalComputer" LoginUser="Administrator" ComputerDomain="hbctxdom.com" ComputerName="hbsep11poc" PreferredGroup="My%20Company%5cHDFC_Global_MR3_Client" PreferredMode="1" HardwareKey="5A146C8DCD9904840E934D06C7433D5C" SiteDomainName=""/>
<SSAHostInfo><NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="hbctxdom.com" HostName="hbsep11poc" HostDesc="" />
<SSAProduct Version="11.0.3001.2224" />
<SSAOS Version="5.2.3790" Desc="Windows%20Server%202003%20family%20Enterprise%20Edition" Type="50659874" ServicePack="Service%20Pack%202"/>
<Processor ProcessorType="x86%20Family%206%20Model%2011%20Stepping%204" ProcessorClock="1396" ProcessorNum="2"/>
<Memory Size="2146910208"/>
<BIOS Version="DELL%20%20%20-%201"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="AAC0-12%2f04%2f2008%2020%3a04%3a32%20750"/>
<SSAIDS Version="" SerialNumber=""/>
<SSAUTC Bias="-330" />
<DNSs><DNS Address="202.54.1.18"/><DNS Address="202.54.1.30"/></DNSs>
<SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
</SSAHostInfo>
</SSARegData>
07/10 19:23:17 [5648] <SendRegistrationRequest:>http://10.226.6.175:801V–¤l óó7D#‹‚;¬ƒîp Ñ^h‘#î@SXìï Ús>š§0°²òWtÛØÄŠ¢È¡ËÀðÁÆ´^=FØ–Žã†¤ ¦H@ë9^‰,¾€jc[#¾-Óå·²!ªL®HÁUÆ݁m/ýn»Á¿q){¢å ¹þéBYªu[–ðI`+H
O„ˆÎ›8}iŠž&‰d«Î©t梌!ùI|»WBvضuþsøyÿs˜â}Ì•ÒD7ËãV¶Ì⎀}ÉA
򌳇
07/10 19:23:17 [5648] 19:23:17=>Send HTTP REQUEST
07/10 19:23:17 [5648] 19:23:17=>HTTP REQUEST sent
07/10 19:23:17 [5648] 19:23:17=>QUERY return code
07/10 19:23:17 [5648] 19:23:17=>QUERY return code completed
07/10 19:23:17 [5648] <SendRegistrationRequest:>SMS return=403
07/10 19:23:17 [5648] <ParseHTTPStatusCode:>403=>403 Forbidden
07/10 19:23:17 [5648] <SendRegistrationRequest:>Content Lenght => 181
07/10 19:23:17 [5648] HTTP returns status code=403
07/10 19:23:17 [5648] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
07/10 19:23:17 [5648] <SendRegistrationRequest:>COMPLETED
07/10 19:23:17 [5648] HEARTBEAT: Check Point 5.1
07/10 19:23:17 [5648] <RegHeartbeatProc>switch to another server
07/10 19:23:17 [5648] HEARTBEAT: Check Point 9
07/10 19:23:17 [5648] HEARTBEAT: Check Point 8
07/10 19:23:17 [5648] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
07/10 19:23:17 [5648] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
07/10 19:23:17 [5648] HEARTBEAT: Check Point 1
07/10 19:23:17 [5648] HEARTBEAT: Check Point 2
07/10 19:23:17 [5648] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
07/10 19:23:17 [5648] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
07/10 19:23:17 [5648] HEARTBEAT: Check Point 3
07/10 19:23:17 [5648] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
07/10 19:23:17 [5648] HEARTBEAT: Check Point 4
07/10 19:23:17 [5648] <RegHeartbeatProc>===Registration STAGE===
07/10 19:23:17 [5648] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator
07/10 19:23:17 [5648] <MakeRegisterData:>XML data: <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="5AEE5DC40AE206AE014D9F9F6717E863" AgentType="105" UserDomain="LocalComputer" LoginUser="Administrator" ComputerDomain="hbctxdom.com" ComputerName="hbsep11poc" PreferredGroup="My%20Company%5cHDFC_Global_MR3_Client" PreferredMode="1" HardwareKey="5A146C8DCD9904840E934D06C7433D5C" SiteDomainName=""/>
<SSAHostInfo><NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="hbctxdom.com" HostName="hbsep11poc" HostDesc="" />
<SSAProduct Version="11.0.3001.2224" />
<SSAOS Version="5.2.3790" Desc="Windows%20Server%202003%20family%20Enterprise%20Edition" Type="50659874" ServicePack="Service%20Pack%202"/>
<Processor ProcessorType="x86%20Family%206%20Model%2011%20Stepping%204" ProcessorClock="1396" ProcessorNum="2"/>
<Memory Size="2146910208"/>
<BIOS Version="DELL%20%20%20-%201"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="AAC0-12%2f04%2f2008%2020%3a04%3a32%20750"/>
<SSAIDS Version="" SerialNumber=""/>
<SSAUTC Bias="-330" />
<DNSs><DNS Address="202.54.1.18"/><DNS Address="202.54.1.30"/></DNSs>
<SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
</SSAHostInfo>
</SSARegData>
07/10 19:23:17 [5648] <SyLink>[MakeRegisterData] registration Hardware Key=5A146C8DCD9904840E934D06C7433D5C
07/10 19:23:17 [5648] ************Reg CSN=1680
07/10 19:23:17 [5648] <mfn_GenPostData (for Registration):>Request is: s_origin_length: 1279
s_session_id: 5A146C8DCD9904840E934D06C7433D5C
Sygate-SSN: 1680
<?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="5AEE5DC40AE206AE014D9F9F6717E863" AgentType="105" UserDomain="LocalComputer" LoginUser="Administrator" ComputerDomain="hbctxdom.com" ComputerName="hbsep11poc" PreferredGroup="My%20Company%5cHDFC_Global_MR3_Client" PreferredMode="1" HardwareKey="5A146C8DCD9904840E934D06C7433D5C" SiteDomainName=""/>
<SSAHostInfo><NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="hbctxdom.com" HostName="hbsep11poc" HostDesc="" />
<SSAProduct Version="11.0.3001.2224" />
<SSAOS Version="5.2.3790" Desc="Windows%20Server%202003%20family%20Enterprise%20Edition" Type="50659874" ServicePack="Service%20Pack%202"/>
<Processor ProcessorType="x86%20Family%206%20Model%2011%20Stepping%204" ProcessorClock="1396" ProcessorNum="2"/>
<Memory Size="2146910208"/>
<BIOS Version="DELL%20%20%20-%201"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="AAC0-12%2f04%2f2008%2020%3a04%3a32%20750"/>
<SSAIDS Version="" SerialNumber=""/>
<SSAUTC Bias="-330" />
<DNSs><DNS Address="202.54.1.18"/><DNS Address="202.54.1.30"/></DNSs>
<SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
</SSAHostInfo>
</SSARegData>
07/10 19:23:17 [5648] <SendRegistrationRequest:>http://10.225.6.118:801V–¤l óó7D#‹‚;¬ƒîp Ñ^h‘#î@SXìï Ús>š§0°²òWtÛØÄŠ¢È¡ËÀðÁÆ´^=FØ–Žã†¤ ¦H@€=jX¸‡s:={䲡B·²!ªL®HÁUÆ݁m/ýn»Á¿q){¢å ¹þéBYªu[–ðI`+H
O„ˆÎ›8}iŠž&‰d«Î©t梌!ùI|»WBvضuþsøyÿs˜â}Ì•ÒD7ËãV¶Ì⎀}ÉA
򌳇
07/10 19:23:17 [5648] 19:23:17=>Send HTTP REQUEST
07/10 19:23:17 [5648] 19:23:17=>HTTP REQUEST sent
07/10 19:23:17 [5648] 19:23:17=>QUERY return code
07/10 19:23:17 [5648] 19:23:17=>QUERY return code completed
07/10 19:23:17 [5648] <SendRegistrationRequest:>SMS return=404
07/10 19:23:17 [5648] <ParseHTTPStatusCode:>404=>404 Not Found
07/10 19:23:17 [5648] <SendRegistrationRequest:>Content Lenght => 1635
07/10 19:23:17 [5648] HTTP returns status code=404
07/10 19:23:17 [5648] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
07/10 19:23:17 [5648] <SendRegistrationRequest:>COMPLETED
07/10 19:23:17 [5648] HEARTBEAT: Check Point 5.1
07/10 19:23:17 [5648] <RegHeartbeatProc>switch to another server
07/10 19:23:17 [5648] HEARTBEAT: Check Point 9
07/10 19:23:17 [5648] HEARTBEAT: Check Point 8
07/10 19:23:17 [5648] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
07/10 19:23:17 [5648] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
07/10 19:23:18 [5648] HEARTBEAT: Check Point 1
07/10 19:23:18 [5648] HEARTBEAT: Check Point 2
07/10 19:23:18 [5648] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
07/10 19:23:18 [5648] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
07/10 19:23:18 [5648] HEARTBEAT: Check Point 3
07/10 19:23:18 [5648] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
07/10 19:23:18 [5648] HEARTBEAT: Check Point 4
07/10 19:23:18 [5648] <RegHeartbeatProc>===Registration STAGE===
07/10 19:23:18 [5648] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator
07/10 19:23:18 [5648] <MakeRegisterData:>XML data: <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="5AEE5DC40AE206AE014D9F9F6717E863" AgentType="105" UserDomain="LocalComputer" LoginUser="Administrator" ComputerDomain="hbctxdom.com" ComputerName="hbsep11poc" PreferredGroup="My%20Company%5cHDFC_Global_MR3_Client" PreferredMode="1" HardwareKey="5A146C8DCD9904840E934D06C7433D5C" SiteDomainName=""/>
<SSAHostInfo><NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="hbctxdom.com" HostName="hbsep11poc" HostDesc="" />
<SSAProduct Version="11.0.3001.2224" />
<SSAOS Version="5.2.3790" Desc="Windows%20Server%202003%20family%20Enterprise%20Edition" Type="50659874" ServicePack="Service%20Pack%202"/>
<Processor ProcessorType="x86%20Family%206%20Model%2011%20Stepping%204" ProcessorClock="1396" ProcessorNum="2"/>
<Memory Size="2146910208"/>
<BIOS Version="DELL%20%20%20-%201"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="AAC0-12%2f04%2f2008%2020%3a04%3a32%20750"/>
<SSAIDS Version="" SerialNumber=""/>
<SSAUTC Bias="-330" />
<DNSs><DNS Address="202.54.1.18"/><DNS Address="202.54.1.30"/></DNSs>
<SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
</SSAHostInfo>
</SSARegData>
07/10 19:23:18 [5648] <SyLink>[MakeRegisterData] registration Hardware Key=5A146C8DCD9904840E934D06C7433D5C
07/10 19:23:18 [5648] ************Reg CSN=1681
07/10 19:23:18 [5648] <mfn_GenPostData (for Registration):>Request is: s_origin_length: 1279
s_session_id: 5A146C8DCD9904840E934D06C7433D5C
Sygate-SSN: 1681
<?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="5AEE5DC40AE206AE014D9F9F6717E863" AgentType="105" UserDomain="LocalComputer" LoginUser="Administrator" ComputerDomain="hbctxdom.com" ComputerName="hbsep11poc" PreferredGroup="My%20Company%5cHDFC_Global_MR3_Client" PreferredMode="1" HardwareKey="5A146C8DCD9904840E934D06C7433D5C" SiteDomainName=""/>
<SSAHostInfo><NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="hbctxdom.com" HostName="hbsep11poc" HostDesc="" />
<SSAProduct Version="11.0.3001.2224" />
<SSAOS Version="5.2.3790" Desc="Windows%20Server%202003%20family%20Enterprise%20Edition" Type="50659874" ServicePack="Service%20Pack%202"/>
<Processor ProcessorType="x86%20Family%206%20Model%2011%20Stepping%204" ProcessorClock="1396" ProcessorNum="2"/>
<Memory Size="2146910208"/>
<BIOS Version="DELL%20%20%20-%201"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="AAC0-12%2f04%2f2008%2020%3a04%3a32%20750"/>
<SSAIDS Version="" SerialNumber=""/>
<SSAUTC Bias="-330" />
<DNSs><DNS Address="202.54.1.18"/><DNS Address="202.54.1.30"/></DNSs>
<SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
</SSAHostInfo>
</SSARegData>
07/10 19:23:18 [5648] <SendRegistrationRequest:>http://10.225.6.119:801V–¤l óó7D#‹‚;¬ƒîp Ñ^h‘#î@SXìï Ús>š§0°²òWtÛØÄŠ¢È¡ËÀðÁÆ´^=FØ–Žã†¤ ¦H@&ˆ¤C¿ÝÈ¿,Ÿ– ÇN>·²!ªL®HÁUÆ݁m/ýn»Á¿q){¢å ¹þéBYªu[–ðI`+H
O„ˆÎ›8}iŠž&‰d«Î©t梌!ùI|»WBvضuþsøyÿs˜â}Ì•ÒD7ËãV¶Ì⎀}ÉA
򌳇
07/10 19:23:18 [5648] 19:23:18=>Send HTTP REQUEST
07/10 19:23:18 [5648] 19:23:18=>HTTP REQUEST sent
07/10 19:23:18 [5648] 19:23:18=>QUERY return code
07/10 19:23:18 [5648] 19:23:18=>QUERY return code completed
07/10 19:23:18 [5648] <SendRegistrationRequest:>SMS return=404
07/10 19:23:18 [5648] <ParseHTTPStatusCode:>404=>404 Not Found
07/10 19:23:18 [5648] <SendRegistrationRequest:>Content Lenght => 1635
07/10 19:23:18 [5648] HTTP returns status code=404
07/10 19:23:18 [5648] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
07/10 19:23:18 [5648] <SendRegistrationRequest:>COMPLETED
07/10 19:23:18 [5648] HEARTBEAT: Check Point 5.1
07/10 19:23:18 [5648] <ScheduleNextUpdate>new scheduled heartbeat=32 seconds
07/10 19:23:18 [5648] HEARTBEAT: Check Point 8
07/10 19:23:18 [5648] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
07/10 19:23:18 [5648] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
07/10 19:23:18 [5648] <RegHeartbeatProc>====== Registration Procedure stops at 19:23:18 ======
07/10 19:23:18 [5648] HEARTBEAT: Check Point 10
07/10 19:23:18 [5648] HEARTBEAT: Check Point Complete
07/10 19:23:18 [5648] <RegHeartbeatProc>Done, Heartbeat=32seconds
07/10 19:23:18 [5648] HeartbeatProcFailed to get profile with proxy setting 1
07/10 19:23:18 [5648] <CheckHeartbeatTimer>====== Heartbeat loop stops at 19:23:18 ======
07/10 19:23:51 [5648] <CheckHeartbeatTimer>====== Heartbeat loop starts at 19:23:51 ======
07/10 19:23:52 [5648] <GetOnlineNicInfo>:Netport Count=1
07/10 19:23:52 [5648] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
07/10 19:23:52 [5648] <CalcAgentHashKey>:CH=5AEE5DC40AE206AE014D9F9F6717E8631hbsep11pochbctxdom.com5A146C8DCD9904840E934D06C7433D5C
07/10 19:23:52 [5648] <CalcAgentHashKey>:CHKey=19AD0AA9694E2F43266CDF7F839C688B
07/10 19:23:52 [5648] <CalcAgentHashKey>:C=5AEE5DC40AE206AE014D9F9F6717E8631hbsep11pochbctxdom.com
07/10 19:23:52 [5648] <CalcAgentHashKey>:CKey=D2720C16A868E874343B810E7AA9CD94
07/10 19:23:52 [5648] <CalcAgentHashKey>:UCH=5AEE5DC40AE206AE014D9F9F6717E8630AdministratorLocalComputerhbsep11pochbctxdom.com5A146C8DCD9904840E934D06C7433D5C
07/10 19:23:52 [5648] <CalcAgentHashKey>:UCHKey=8CA6728FD0CCE3E7B79F618E206B1E2A
07/10 19:23:52 [5648] <CalcAgentHashKey>:UC=5AEE5DC40AE206AE014D9F9F6717E8630AdministratorLocalComputerhbsep11pochbctxdom.com
07/10 19:23:52 [5648] <CalcAgentHashKey>:UCKey=1F1CD88C034A0E7AE90AE0CD0A98DDFF
07/10 19:23:52 [5648] <DoHeartbeat>HardwareID=5A146C8DCD9904840E934D06C7433D5C
07/10 19:23:52 [5648] <DoHeartbeat>CHKey=19AD0AA9694E2F43266CDF7F839C688B
07/10 19:23:52 [5648] <DoHeartbeat>CKey=D2720C16A868E874343B810E7AA9CD94
07/10 19:23:52 [5648] <DoHeartbeat>UCHKey=8CA6728FD0CCE3E7B79F618E206B1E2A
07/10 19:23:52 [5648] <DoHeartbeat>UCKey=1F1CD88C034A0E7AE90AE0CD0A98DDFF
07/10 19:23:52 [5648] <DoHeartbeat> Set heartbeat event
07/10 19:23:52 [5648] Use new configuration
07/10 19:23:52 [5648] <CSyLink::IndexHeartbeatProc()>
07/10 19:23:52 [5648] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 01D0D290
07/10 19:23:52 [5648] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 19:23:52 ======
07/10 19:23:52 [5648] HEARTBEAT: Check Point 1
07/10 19:23:52 [5648] Get First Server!
07/10 19:23:52 [5648] HEARTBEAT: Check Point 2
07/10 19:23:52 [5648] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
07/10 19:23:52 [5648] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
07/10 19:23:52 [5648] HEARTBEAT: Check Point 3
07/10 19:23:52 [5648] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
07/10 19:23:52 [5648] HEARTBEAT: Check Point 4
07/10 19:23:52 [5648] <IndexHeartbeatProc>===Get Index STAGE===
07/10 19:23:52 [5648] ************CSN=2285
07/10 19:23:52 [5648] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=7BC113D80AE206AE012CE574D420A646&chk=19AD0AA9694E2F43266CDF7F839C688B&ck=D2720C16A868E874343B810E7AA9CD94&uchk=8CA6728FD0CCE3E7B79F618E206B1E2A&uck=1F1CD88C034A0E7AE90AE0CD0A98DDFF&hid=5A146C8DCD9904840E934D06C7433D5C&groupid=5AEE5DC40AE206AE014D9F9F6717E863&mode=0&hbt=3600&as=2285&cn=[hex]68627365703131706F63&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
07/10 19:23:52 [5648] <GetIndexFileRequest:>http://10.226.6.174:80/secars/secars.dll?h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
07/10 19:23:52 [5648] 19:23:52=>Send HTTP REQUEST
07/10 19:23:52 [5648] 19:23:52=>HTTP REQUEST sent
07/10 19:23:52 [5648] <GetIndexFileRequest:>SMS return=407
07/10 19:23:52 [5648] <ParseHTTPStatusCode:>407=>Uninterpreted Status
07/10 19:23:52 [5648] HTTP returns status code=407
07/10 19:23:52 [5648] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
07/10 19:23:52 [5648] <GetIndexFileRequest:>COMPLETED
07/10 19:23:52 [5648] <IndexHeartbeatProc>GetIndexFile handling status: 407
07/10 19:23:52 [5648] <IndexHeartbeatProc>Switch Server flag=1
07/10 19:23:52 [5648] HEARTBEAT: Check Point 5.1
07/10 19:23:52 [5648] <ScheduleNextUpdate>new scheduled heartbeat=64 seconds
07/10 19:23:52 [5648] HEARTBEAT: Check Point 8
07/10 19:23:52 [5648] Get Next Server!
07/10 19:23:52 [5648] <IndexHeartbeatProc>switch to another server
07/10 19:23:52 [5648] <DecrementScheduleTime:>New scheduled heartbeat=32 seconds
07/10 19:23:53 [5648] HEARTBEAT: Check Point 1
07/10 19:23:53 [5648] HEARTBEAT: Check Point 2
07/10 19:23:53 [5648] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
07/10 19:23:53 [5648] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
07/10 19:23:53 [5648] HEARTBEAT: Check Point 3
07/10 19:23:53 [5648] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
07/10 19:23:53 [5648] HEARTBEAT: Check Point 4
07/10 19:23:53 [5648] <IndexHeartbeatProc>===Get Index STAGE===
07/10 19:23:53 [5648] ************CSN=2286
07/10 19:23:53 [5648] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=7BC113D80AE206AE012CE574D420A646&chk=19AD0AA9694E2F43266CDF7F839C688B&ck=D2720C16A868E874343B810E7AA9CD94&uchk=8CA6728FD0CCE3E7B79F618E206B1E2A&uck=1F1CD88C034A0E7AE90AE0CD0A98DDFF&hid=5A146C8DCD9904840E934D06C7433D5C&groupid=5AEE5DC40AE206AE014D9F9F6717E863&mode=0&hbt=3600&as=2286&cn=[hex]68627365703131706F63&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
07/10 19:23:53 [5648] <GetIndexFileRequest:>http://10.226.6.175:80/secars/secars.dll?h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
07/10 19:23:53 [5648] 19:23:53=>Send HTTP REQUEST
07/10 19:23:53 [5648] 19:23:53=>HTTP REQUEST sent
07/10 19:23:53 [5648] <GetIndexFileRequest:>SMS return=407
07/10 19:23:53 [5648] <ParseHTTPStatusCode:>407=>Uninterpreted Status
07/10 19:23:53 [5648] HTTP returns status code=407
07/10 19:23:53 [5648] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
07/10 19:23:53 [5648] <GetIndexFileRequest:>COMPLETED
07/10 19:23:53 [5648] <IndexHeartbeatProc>GetIndexFile handling status: 407
07/10 19:23:53 [5648] <IndexHeartbeatProc>Switch Server flag=1
07/10 19:23:53 [5648] HEARTBEAT: Check Point 5.1
07/10 19:23:53 [5648] <ScheduleNextUpdate>new scheduled heartbeat=64 seconds
07/10 19:23:53 [5648] HEARTBEAT: Check Point 8
07/10 19:23:53 [5648] Get Next Server!
07/10 19:23:53 [5648] <IndexHeartbeatProc>switch to another server
07/10 19:23:53 [5648] <DecrementScheduleTime:>New scheduled heartbeat=32 seconds
07/10 19:23:53 [5648] HEARTBEAT: Check Point 1
07/10 19:23:53 [5648] HEARTBEAT: Check Point 2
07/10 19:23:53 [5648] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
07/10 19:23:53 [5648] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
07/10 19:23:53 [5648] HEARTBEAT: Check Point 3
07/10 19:23:53 [5648] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
07/10 19:23:53 [5648] HEARTBEAT: Check Point 4
07/10 19:23:53 [5648] <IndexHeartbeatProc>===Get Index STAGE===
07/10 19:23:53 [5648] ************CSN=2287
07/10 19:23:53 [5648] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=7BC113D80AE206AE012CE574D420A646&chk=19AD0AA9694E2F43266CDF7F839C688B&ck=D2720C16A868E874343B810E7AA9CD94&uchk=8CA6728FD0CCE3E7B79F618E206B1E2A&uck=1F1CD88C034A0E7AE90AE0CD0A98DDFF&hid=5A146C8DCD9904840E934D06C7433D5C&groupid=5AEE5DC40AE206AE014D9F9F6717E863&mode=0&hbt=3600&as=2287&cn=[hex]68627365703131706F63&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
07/10 19:23:53 [5648] <GetIndexFileRequest:>http://10.225.6.119:80/secars/secars.dll?h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
07/10 19:23:53 [5648] 19:23:53=>Send HTTP REQUEST
07/10 19:23:53 [5648] 19:23:53=>HTTP REQUEST sent
07/10 19:23:53 [5648] <GetIndexFileRequest:>SMS return=407
07/10 19:23:53 [5648] <ParseHTTPStatusCode:>407=>Uninterpreted Status
07/10 19:23:53 [5648] HTTP returns status code=407
07/10 19:23:53 [5648] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
07/10 19:23:53 [5648] <GetIndexFileRequest:>COMPLETED
07/10 19:23:53 [5648] <IndexHeartbeatProc>GetIndexFile handling status: 407
07/10 19:23:53 [5648] <IndexHeartbeatProc>Switch Server flag=1
07/10 19:23:53 [5648] HEARTBEAT: Check Point 5.1
07/10 19:23:53 [5648] <ScheduleNextUpdate>new scheduled heartbeat=64 seconds
07/10 19:23:53 [5648] HEARTBEAT: Check Point 8
07/10 19:23:53 [5648] Get Next Server!
07/10 19:23:53 [5648] <IndexHeartbeatProc>switch to another server
07/10 19:23:53 [5648] <DecrementScheduleTime:>New scheduled heartbeat=32 seconds
07/10 19:23:54 [5648] HEARTBEAT: Check Point 1
07/10 19:23:54 [5648] HEARTBEAT: Check Point 2
07/10 19:23:54 [5648] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
07/10 19:23:54 [5648] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
07/10 19:23:54 [5648] HEARTBEAT: Check Point 3
07/10 19:23:54 [5648] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
07/10 19:23:54 [5648] HEARTBEAT: Check Point 4
07/10 19:23:54 [5648] <IndexHeartbeatProc>===Get Index STAGE===
07/10 19:23:54 [5648] ************CSN=2288
07/10 19:23:54 [5648] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=7BC113D80AE206AE012CE574D420A646&chk=19AD0AA9694E2F43266CDF7F839C688B&ck=D2720C16A868E874343B810E7AA9CD94&uchk=8CA6728FD0CCE3E7B79F618E206B1E2A&uck=1F1CD88C034A0E7AE90AE0CD0A98DDFF&hid=5A146C8DCD9904840E934D06C7433D5C&groupid=5AEE5DC40AE206AE014D9F9F6717E863&mode=0&hbt=3600&as=2288&cn=[hex]68627365703131706F63&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
07/10 19:23:54 [5648] <GetIndexFileRequest:>http://10.225.6.118:80/secars/secars.dll?h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
07/10 19:23:54 [5648] 19:23:54=>Send HTTP REQUEST
07/10 19:23:54 [5648] 19:23:54=>HTTP REQUEST sent
07/10 19:23:54 [5648] <GetIndexFileRequest:>SMS return=407
07/10 19:23:54 [5648] <ParseHTTPStatusCode:>407=>Uninterpreted Status
07/10 19:23:54 [5648] HTTP returns status code=407
07/10 19:23:54 [5648] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
07/10 19:23:54 [5648] <GetIndexFileRequest:>COMPLETED
07/10 19:23:54 [5648] <IndexHeartbeatProc>GetIndexFile handling status: 407
07/10 19:23:54 [5648] <IndexHeartbeatProc>Switch Server flag=1
07/10 19:23:54 [5648] HEARTBEAT: Check Point 5.1
07/10 19:23:54 [5648] <ScheduleNextUpdate>new scheduled heartbeat=64 seconds
07/10 19:23:54 [5648] HEARTBEAT: Check Point 8
07/10 19:23:54 [5648] Get Next Server!
07/10 19:23:54 [5648] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
07/10 19:23:54 [5648] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
07/10 19:23:54 [5648] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 19:23:54 ======
07/10 19:23:54 [5648] <IndexHeartbeatProc>Set Heartbeat Result= 1
07/10 19:23:54 [5648] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 1, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
07/10 19:23:54 [5648] <IndexHeartbeatProc>Connection Failed! No. of tries = 1
07/10 19:23:54 [5648] Use new configuration
07/10 19:23:54 [5648] HEARTBEAT: Check Point Complete
07/10 19:23:54 [5648] <IndexHeartbeatProc>Done, Heartbeat=64seconds
07/10 19:23:54 [5648] </CSyLink::IndexHeartbeatProc()>
07/10 19:23:54 [5648] HeartbeatProcFailed to get profile with proxy setting 2
07/10 19:23:54 [5648] <CheckHeartbeatTimer>====== Heartbeat loop stops at 19:23:54 ======

Things are EASY with File Sharing....... It makes easy for Viruses also...!!

Symantec SEP11 STS
Symantec SNAC 11 STS

Vikram Kumar-SAV to SEP's picture

I think when you try to post something with special characters or chracters that cannot be displayed it doesn't get added..
So can you cut and paste only part of logs..
Also find for SMS Codes in the log like
SMS 491,403,500 etc..

Have you restored the database ??or have you rebuil the SEPM ?? 

Vikram Kumar

Symantec Consultant

The most helpful part of entire Symantec connect is the Search button..do use it.

hemu's picture

07/10 19:23:16 [5648] 19:23:16=>Send HTTP REQUEST
07/10 19:23:16 [5648] 19:23:16=>HTTP REQUEST sent
07/10 19:23:16 [5648] 19:23:16=>QUERY return code
07/10 19:23:16 [5648] 19:23:16=>QUERY return code completed
07/10 19:23:16 [5648] <SendRegistrationRequest:>SMS return=468
07/10 19:23:16 [5648] <ParseHTTPStatusCode:>468=>468 Request not allowed
07/10 19:23:16 [5648] <SendRegistrationRequest:>Content Lenght => 48
07/10 19:23:16 [5648] <mfn_DecodeSSN>Sygate-SSN=1677
07/10 19:23:16 [5648] <mfn_DecodeSSN>Read CSN=1678
07/10 19:23:16 [5648] HTTP returns status code=468
07/10 19:23:16 [5648] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
07/10 19:23:16 [5648] <SendRegistrationRequest:>COMPLETED
07/10 19:23:16 [5648] HEARTBEAT: Check Point 5.1
07/10 19:23:16 [5648] <RegHeartbeatProc>switch to another server
07/10 19:23:16 [5648] HEARTBEAT: Check Point 9
07/10 19:23:16 [5648] HEARTBEAT: Check Point 8
07/10 19:23:16 [5648] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
07/10 19:23:16 [5648] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
07/10 19:23:17 [5648] HEARTBEAT: Check Point 1
07/10 19:23:17 [5648] HEARTBEAT: Check Point 2
07/10 19:23:17 [5648] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
07/10 19:23:17 [5648] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
07/10 19:23:17 [5648] HEARTBEAT: Check Point 3
07/10 19:23:17 [5648] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
07/10 19:23:17 [5648] HEARTBEAT: Check Point 4
07/10 19:23:17 [5648] <RegHeartbeatProc>===Registration STAGE===
07/10 19:23:17 [5648] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator
07/10 19:23:17 [5648] <MakeRegisterData:>XML d

Things are EASY with File Sharing....... It makes easy for Viruses also...!!

Symantec SEP11 STS
Symantec SNAC 11 STS

Beppe's picture

Hi,

this piece of log is too short... take a longer record and attach it to the discussion.

Regards,

Regards,

Giuseppe

hemu's picture

07/10 21:57:32 [5264] <ScheduleNextUpdate>Manually assigned heartbeat=1 seconds
07/10 21:57:33 [4188] <CheckHeartbeatTimer>====== Heartbeat loop starts at 21:57:33 ======
07/10 21:57:33 [4188] <GetOnlineNicInfo>:Netport Count=1
07/10 21:57:33 [4188] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
07/10 21:57:33 [4188] <CalcAgentHashKey>:CH=5AEE5DC40AE206AE014D9F9F6717E8631hbsep11pochbctxdom.com5A146C8DCD9904840E934D06C7433D5C
07/10 21:57:33 [4188] <CalcAgentHashKey>:CHKey=19AD0AA9694E2F43266CDF7F839C688B
07/10 21:57:33 [4188] <CalcAgentHashKey>:C=5AEE5DC40AE206AE014D9F9F6717E8631hbsep11pochbctxdom.com
07/10 21:57:33 [4188] <CalcAgentHashKey>:CKey=D2720C16A868E874343B810E7AA9CD94
07/10 21:57:33 [4188] <CalcAgentHashKey>:UCH=5AEE5DC40AE206AE014D9F9F6717E8630AdministratorLocalComputerhbsep11pochbctxdom.com5A146C8DCD9904840E934D06C7433D5C
07/10 21:57:33 [4188] <CalcAgentHashKey>:UCHKey=8CA6728FD0CCE3E7B79F618E206B1E2A
07/10 21:57:33 [4188] <CalcAgentHashKey>:UC=5AEE5DC40AE206AE014D9F9F6717E8630AdministratorLocalComputerhbsep11pochbctxdom.com
07/10 21:57:33 [4188] <CalcAgentHashKey>:UCKey=1F1CD88C034A0E7AE90AE0CD0A98DDFF
07/10 21:57:33 [4188] <DoHeartbeat>HardwareID=5A146C8DCD9904840E934D06C7433D5C
07/10 21:57:33 [4188] <DoHeartbeat>CHKey=19AD0AA9694E2F43266CDF7F839C688B
07/10 21:57:33 [4188] <DoHeartbeat>CKey=D2720C16A868E874343B810E7AA9CD94
07/10 21:57:33 [4188] <DoHeartbeat>UCHKey=8CA6728FD0CCE3E7B79F618E206B1E2A
07/10 21:57:33 [4188] <DoHeartbeat>UCKey=1F1CD88C034A0E7AE90AE0CD0A98DDFF
07/10 21:57:33 [4188] <DoHeartbeat> Set heartbeat event
07/10 21:57:33 [4188] Use new configuration
07/10 21:57:33 [4188] <CSyLink::IndexHeartbeatProc()>
07/10 21:57:33 [4188] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 01D28008
07/10 21:57:33 [4188] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 21:57:33 ======
07/10 21:57:34 [4188] HEARTBEAT: Check Point 1
07/10 21:57:34 [4188] Get First Server!
07/10 21:57:34 [4188] HEARTBEAT: Check Point 2
07/10 21:57:34 [4188] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
07/10 21:57:34 [4188] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
07/10 21:57:34 [4188] HEARTBEAT: Check Point 3
07/10 21:57:34 [4188] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
07/10 21:57:34 [4188] HEARTBEAT: Check Point 4
07/10 21:57:34 [4188] <IndexHeartbeatProc>===Get Index STAGE===
07/10 21:57:34 [4188] ************CSN=2421
07/10 21:57:34 [4188] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=7BC113D80AE206AE012CE574D420A646&chk=19AD0AA9694E2F43266CDF7F839C688B&ck=D2720C16A868E874343B810E7AA9CD94&uchk=8CA6728FD0CCE3E7B79F618E206B1E2A&uck=1F1CD88C034A0E7AE90AE0CD0A98DDFF&hid=5A146C8DCD9904840E934D06C7433D5C&groupid=5AEE5DC40AE206AE014D9F9F6717E863&mode=0&hbt=3600&as=2421&cn=[hex]68627365703131706F63&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
07/10 21:57:34 [4188] <GetIndexFileRequest:>http://10.226.6.175:80/secars/secars.dll?h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
07/10 21:57:34 [4188] 21:57:34=>Send HTTP REQUEST
07/10 21:57:34 [4188] 21:57:34=>HTTP REQUEST sent
07/10 21:57:34 [4188] <GetIndexFileRequest:>SMS return=403
07/10 21:57:34 [4188] <ParseHTTPStatusCode:>403=>403 Forbidden
07/10 21:57:34 [4188] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
07/10 21:57:34 [4188] <GetIndexFileRequest:>COMPLETED
07/10 21:57:34 [4188] <IndexHeartbeatProc>GetIndexFile handling status: 403
07/10 21:57:34 [4188] <IndexHeartbeatProc>Switch Server flag=1
07/10 21:57:34 [4188] HEARTBEAT: Check Point 5.1
07/10 21:57:34 [4188] <ScheduleNextUpdate>new scheduled heartbeat=1024 seconds
07/10 21:57:34 [4188] HEARTBEAT: Check Point 8
07/10 21:57:34 [4188] Get Next Server!
07/10 21:57:34 [4188] <IndexHeartbeatProc>switch to another server
07/10 21:57:34 [4188] <DecrementScheduleTime:>New scheduled heartbeat=512 seconds
07/10 21:57:34 [4188] HEARTBEAT: Check Point 1
07/10 21:57:34 [4188] HEARTBEAT: Check Point 2
07/10 21:57:34 [4188] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
07/10 21:57:34 [4188] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
07/10 21:57:34 [4188] HEARTBEAT: Check Point 3
07/10 21:57:34 [4188] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
07/10 21:57:34 [4188] HEARTBEAT: Check Point 4
07/10 21:57:34 [4188] <IndexHeartbeatProc>===Get Index STAGE===
07/10 21:57:34 [4188] ************CSN=2422
07/10 21:57:34 [4188] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=7BC113D80AE206AE012CE574D420A646&chk=19AD0AA9694E2F43266CDF7F839C688B&ck=D2720C16A868E874343B810E7AA9CD94&uchk=8CA6728FD0CCE3E7B79F618E206B1E2A&uck=1F1CD88C034A0E7AE90AE0CD0A98DDFF&hid=5A146C8DCD9904840E934D06C7433D5C&groupid=5AEE5DC40AE206AE014D9F9F6717E863&mode=0&hbt=3600&as=2422&cn=[hex]68627365703131706F63&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
07/10 21:57:34 [4188] <GetIndexFileRequest:>http://10.226.6.174:80/secars/secars.dll?h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
07/10 21:57:34 [4188] 21:57:34=>Send HTTP REQUEST
07/10 21:57:35 [4188] 21:57:35=>HTTP REQUEST sent
07/10 21:57:35 [4188] <GetIndexFileRequest:>SMS return=200
07/10 21:57:35 [4188] <ParseHTTPStatusCode:>200=>200 OK
07/10 21:57:35 [4188] <FindHeader>Sem-HashKey:=>19AD0AA9694E2F43266CDF7F839C688B
07/10 21:57:35 [4188] <FindHeader>Sem-LANSensor:=>0
07/10 21:57:35 [4188] <FindHeader>Sem-Signatue:=>A59FA6AE4D9D9BB06AE8CD953476EA9BB0FFD262DB8898B50BBD91FF9EA0D6EDEDB4F5DD2EFED42EE7E68CD5D501B4DECAABBA349AD01522081E85661678053D6AEE976F75D9B98A668B44C8788878A9FFD89739BA544E7FF01797AD863EA22E4AA7B45EE9B0568FF0AF1EFDE602F462174052801619EF6EFD27E4A724D34B1C
07/10 21:57:35 [4188] <mfn_DoGetIndexFile200>Content Lenght => 1368
07/10 21:57:35 [4188] <mfn_DoGetIndexFile200>Signature verification FAILED for Index File Content..
07/10 21:57:35 [4188] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
07/10 21:57:35 [4188] <GetIndexFileRequest:>COMPLETED
07/10 21:57:35 [4188] <IndexHeartbeatProc>GetIndexFile handling status: 101
07/10 21:57:35 [4188] <IndexHeartbeatProc>Switch Server flag=0
07/10 21:57:35 [4188] HEARTBEAT: Check Point 5.1
07/10 21:57:35 [4188] <ScheduleNextUpdate>new scheduled heartbeat=1024 seconds
07/10 21:57:35 [4188] HEARTBEAT: Check Point 8
07/10 21:57:35 [4188] Get Next Server!
07/10 21:57:35 [4188] <IndexHeartbeatProc>switch to another server
07/10 21:57:35 [4188] <DecrementScheduleTime:>New scheduled heartbeat=512 seconds
07/10 21:57:35 [4188] HEARTBEAT: Check Point 1
07/10 21:57:35 [4188] HEARTBEAT: Check Point 2
07/10 21:57:35 [4188] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
07/10 21:57:35 [4188] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
07/10 21:57:35 [4188] HEARTBEAT: Check Point 3
07/10 21:57:35 [4188] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
07/10 21:57:35 [4188] HEARTBEAT: Check Point 4
07/10 21:57:35 [4188] <IndexHeartbeatProc>===Get Index STAGE===
07/10 21:57:35 [4188] ************CSN=2423
07/10 21:57:35 [4188] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=7BC113D80AE206AE012CE574D420A646&chk=19AD0AA9694E2F43266CDF7F839C688B&ck=D2720C16A868E874343B810E7AA9CD94&uchk=8CA6728FD0CCE3E7B79F618E206B1E2A&uck=1F1CD88C034A0E7AE90AE0CD0A98DDFF&hid=5A146C8DCD9904840E934D06C7433D5C&groupid=5AEE5DC40AE206AE014D9F9F6717E863&mode=0&hbt=3600&as=2423&cn=[hex]68627365703131706F63&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
07/10 21:57:35 [4188] <GetIndexFileRequest:>http://10.225.6.118:80/secars/secars.dll?h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
07/10 21:57:35 [4188] 21:57:35=>Send HTTP REQUEST
07/10 21:57:35 [4188] 21:57:35=>HTTP REQUEST sent
07/10 21:57:35 [4188] <GetIndexFileRequest:>SMS return=404
07/10 21:57:35 [4188] <ParseHTTPStatusCode:>404=>404 Not Found
07/10 21:57:35 [4188] HTTP returns status code=404
07/10 21:57:35 [4188] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
07/10 21:57:35 [4188] <GetIndexFileRequest:>COMPLETED
07/10 21:57:35 [4188] <IndexHeartbeatProc>GetIndexFile handling status: 404
07/10 21:57:35 [4188] <IndexHeartbeatProc>Switch Server flag=1
07/10 21:57:35 [4188] HEARTBEAT: Check Point 5.1
07/10 21:57:35 [4188] <ScheduleNextUpdate>new scheduled heartbeat=1024 seconds
07/10 21:57:35 [4188] HEARTBEAT: Check Point 8
07/10 21:57:35 [4188] Get Next Server!
07/10 21:57:35 [4188] <IndexHeartbeatProc>switch to another server
07/10 21:57:35 [4188] <DecrementScheduleTime:>New scheduled heartbeat=512 seconds
07/10 21:57:36 [4188] HEARTBEAT: Check Point 1
07/10 21:57:36 [4188] HEARTBEAT: Check Point 2
07/10 21:57:36 [4188] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
07/10 21:57:36 [4188] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
07/10 21:57:36 [4188] HEARTBEAT: Check Point 3
07/10 21:57:36 [4188] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
07/10 21:57:36 [4188] HEARTBEAT: Check Point 4
07/10 21:57:36 [4188] <IndexHeartbeatProc>===Get Index STAGE===
07/10 21:57:36 [4188] ************CSN=2424
07/10 21:57:36 [4188] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=7BC113D80AE206AE012CE574D420A646&chk=19AD0AA9694E2F43266CDF7F839C688B&ck=D2720C16A868E874343B810E7AA9CD94&uchk=8CA6728FD0CCE3E7B79F618E206B1E2A&uck=1F1CD88C034A0E7AE90AE0CD0A98DDFF&hid=5A146C8DCD9904840E934D06C7433D5C&groupid=5AEE5DC40AE206AE014D9F9F6717E863&mode=0&hbt=3600&as=2424&cn=[hex]68627365703131706F63&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
07/10 21:57:36 [4188] <GetIndexFileRequest:>http://10.225.6.119:80/secars/secars.dll?h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
07/10 21:57:36 [4188] 21:57:36=>Send HTTP REQUEST
07/10 21:57:36 [4188] 21:57:36=>HTTP REQUEST sent
07/10 21:57:36 [4188] <GetIndexFileRequest:>SMS return=404
07/10 21:57:36 [4188] <ParseHTTPStatusCode:>404=>404 Not Found
07/10 21:57:36 [4188] HTTP returns status code=404
07/10 21:57:36 [4188] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
07/10 21:57:36 [4188] <GetIndexFileRequest:>COMPLETED
07/10 21:57:36 [4188] <IndexHeartbeatProc>GetIndexFile handling status: 404
07/10 21:57:36 [4188] <IndexHeartbeatProc>Switch Server flag=1
07/10 21:57:36 [4188] HEARTBEAT: Check Point 5.1
07/10 21:57:36 [4188] <ScheduleNextUpdate>new scheduled heartbeat=1024 seconds
07/10 21:57:36 [4188] HEARTBEAT: Check Point 8
07/10 21:57:36 [4188] Get Next Server!
07/10 21:57:36 [4188] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
07/10 21:57:36 [4188] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
07/10 21:57:36 [4188] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 21:57:36 ======
07/10 21:57:36 [4188] <IndexHeartbeatProc>Set Heartbeat Result= 1
07/10 21:57:36 [4188] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 1, 'Using Backup Sylink' = 1, 'Using Location Config' = 0
07/10 21:57:36 [4188] <IndexHeartbeatProc>Connection Failed! No. of tries = 2
07/10 21:57:36 [4188] Use new configuration
07/10 21:57:36 [4188] HEARTBEAT: Check Point Complete
07/10 21:57:36 [4188] <IndexHeartbeatProc>Done, Heartbeat=1024seconds
07/10 21:57:36 [4188] </CSyLink::IndexHeartbeatProc()>
07/10 21:57:36 [4188] <CheckHeartbeatTimer>====== Heartbeat loop stops at 21:57:36 ======

Things are EASY with File Sharing....... It makes easy for Viruses also...!!

Symantec SEP11 STS
Symantec SNAC 11 STS

pete_4u2002's picture

for the server http://10.226.6.175:80/ it shows 403 error. This is mostly seen when you have permission issue on the IIS.

GetIndexFileRequest:>http://10.226.6.175:80/secars/secars.dll?
07/10 21:57:34 [4188] <GetIndexFileRequest:>SMS return=403

for the server http://10.226.6.174:80/ it has connected however we see an signature verification failed.

07/10 21:57:34 [4188] <GetIndexFileRequest:>http://10.226.6.174:80/secars/secars.dll?h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
07/10 21:57:34 [4188] 21:57:34=>Send HTTP REQUEST
07/10 21:57:35 [4188] 21:57:35=>HTTP REQUEST sent
07/10 21:57:35 [4188] <GetIndexFileRequest:>SMS return=200
07/10 21:57:35 [4188] <ParseHTTPStatusCode:>200=>200 OK
07/10 21:57:35 [4188] <FindHeader>Sem-HashKey:=>19AD0AA9694E2F43266CDF7F839C688B
07/10 21:57:35 [4188] <FindHeader>Sem-LANSensor:=>0
07/10 21:57:35 [4188] <FindHeader>Sem-Signatue:=>A59FA6AE4D9D9BB06AE8CD953476EA9BB0FFD262DB8898B50BBD91FF9EA0D6EDEDB4F5DD2EFED42EE7E68CD5D501B4DECAABBA349AD01522081E85661678053D6AEE976F75D9B98A668B44C8788878A9FFD89739BA544E7FF01797AD863EA22E4AA7B45EE9B0568FF0AF1EFDE602F462174052801619EF6EFD27E4A724D34B1C
07/10 21:57:35 [4188] <mfn_DoGetIndexFile200>Content Lenght => 1368
07/10 21:57:35 [4188] <mfn_DoGetIndexFile200>Signature verification FAILED for Index File Content..

for the servers http://10.225.6.119:80 and http://10.225.6.118:80 the error is 404, verify the servers are running on these ports .

The requested file has been renamed.
The requested file has been moved to another location and/or deleted.
The requested file is temporarily unavailable due to maintenance, upgrades, or other unknown causes.

You can verify connect to the server which has message 200 by following the steps mentioned in the Symantec URL
http://service1.symantec.com/support/ent-security....

good luck
Pete

 

hemu's picture

Dear Pete,

thnx for ur reply can u please help to understbad y there is Signature verification FAILED for Index File Content.....

Thnx

Things are EASY with File Sharing....... It makes easy for Viruses also...!!

Symantec SEP11 STS
Symantec SNAC 11 STS

hemu's picture

also help me to understabd which files has been moved or deleted from server 118 and 119

Things are EASY with File Sharing....... It makes easy for Viruses also...!!

Symantec SEP11 STS
Symantec SNAC 11 STS

pete_4u2002's picture

the site itself would be moved to someother port...since this is communicating on port 80 as per the sy;link, verify if these servers are running on same port....

good luck
Pete

hemu's picture

pete
this problenm i am facing only with old package which is exported from MR3 console
after upgreading SEPM to MR4 MP2 till 1 minth evrything was works fine....

Things are EASY with File Sharing....... It makes easy for Viruses also...!!

Symantec SEP11 STS
Symantec SNAC 11 STS

Vikram Kumar-SAV to SEP's picture

Question/Issue:
Symantec Endpoint Protection clients are not able to receive virus definitions or policy information from Symantec Endpoint Protection Manager after a re-installation.

Symptoms:
The Symantec Endpoint Protection agent is not able to communicate with Symantec Endpoint Protection server. After running sylinkwatcher.exe you find <GetIndexFileRequest:>SMS return=200, and error "Signature verification FAILED for Index File Content"

Cause:
The folders in C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\outbox\agent on the old Symantec Endpoint Protection Manager server are associated with the clients in the previous installation and only work with old clients. New folders are created during re-installation of Symantec Endpoint Protection manager server using the same path as the older installation and will not allow authentication of old clients.

Solution:
To correct this issue, follow the below steps:

Open Symantec Endpoint Protection Manager console
Click Clients
Right-click on the group where the problem clients are located
Delete the client that is not getting updates.

The client will now show in the Symantec Endpoint Protection Manager on the next hearthbeat and start updating again.

Alternatively you can go to the client and force a check in.

Open the client interface from the client
Click Help and Support> Troubleshooting> Update.

Vikram Kumar

Symantec Consultant

The most helpful part of entire Symantec connect is the Search button..do use it.

hemu's picture

Dear Vikram,

We are not facing problenm with old installed clinet we are facing this issue wt new installetion on which we naver installed SEP.
We are using old package which is exported form SEP MR3 console...........

Thnx for ur reply.

Things are EASY with File Sharing....... It makes easy for Viruses also...!!

Symantec SEP11 STS
Symantec SNAC 11 STS

Vikram Kumar-SAV to SEP's picture

In that case you can just go ahed and create new package..
Did you delete the MR3 package from inside the SEPM ? If no then you can export MR3 packages as well or directly export the MR4MP2 package and deploy it. 

Vikram Kumar

Symantec Consultant

The most helpful part of entire Symantec connect is the Search button..do use it.

Peterpan's picture

I guess your problem is the same what I encountered, you are experiencing a client communcation issue, to resolve this this link below might be helpful.

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/16638b5449556ae3882574c200793618?OpenDocument

:-)

hemu's picture

this all KB is followed by me and also by support by taking webex sevra; times.................no help..........

Thnx for reply.......
hemang

Things are EASY with File Sharing....... It makes easy for Viruses also...!!

Symantec SEP11 STS
Symantec SNAC 11 STS

pete_4u2002's picture

hi hemu,

well in that case, with the new package exported from SEPM and installed on client makes client show online? if yes, the best way moving forward is to to do that, the reason is SEP MR 4 MP 2 has fixes to issues to seen in MR 3 and other older version.

In coming days you might upgrade them to MR 4 MP2 or MR 5, hence it would make sense to upgrade now.

Please keep us posted on the issue if you get to know the reason.

Cheers
Pete

Peterpan's picture

try to use sylinkremote tool from symantec to push the sylink.xml to recommunicate the SEP clients to SEPM server, I believe that you are experiencing a communication issue, it was happened to me before.

:-)

profman's picture

 I think you are right Peter, it sounds like the same issues I have had before where the wrong package was pushed,

hemu's picture

Package is not wrong it is beeing installed from last 9 months and 25k Clinets are working fine after upgreading MR 4 MP 2 also worke fine for 2 month all off sudden it started happning and new package working fine..............But new packag is not the solution please help me to understand SEP................

Things are EASY with File Sharing....... It makes easy for Viruses also...!!

Symantec SEP11 STS
Symantec SNAC 11 STS

profman's picture

Hemu,

If you are using an old package on a new server then you will not have any success until you do the following:

1. Get the Sylinkreplacer.exe and follow these directions http://service1.symantec.com/SUPPORT/ent-security....

This will allow you to replace the xml certificate which provides client authentication. Because you are using an old package on a new server, the certificate will have changed and so the new one must be pushed out to the clients.

2. Guarantee network connectivity from one of the client machines to the server by running a ping test.

3. Issue an update commend from the console.

4. in the CLI, run an active netstat to watch for a connection from the server to be established. 

5. Go back to the SEPM Console and wait 5-15 minutes. If the command executes successfully, then good, if not, we have a network or NTFS issue.

Peterpan's picture

Check the IIS performance, and the bandwidth alloted to the server and to your network, I thing you are experiencing a network issue as mine.

:-)

hemu's picture

Dear profman

If sylink.xml is the issue y erything goes fine till month after upgreading MR3 console to MR4 MP2..........

Dear Peterpan

Network is not the issue.......... Please talk on topic new packag is working fine.......

Things are EASY with File Sharing....... It makes easy for Viruses also...!!

Symantec SEP11 STS
Symantec SNAC 11 STS

kavin's picture

Hi Hemu,

Did you ever do an Uninstall & reinstall of the SEPM & then restored the Database??????

Plese let me know?

hemu's picture

Yes symantec support has done with dis also no sucess............

Things are EASY with File Sharing....... It makes easy for Viruses also...!!

Symantec SEP11 STS
Symantec SNAC 11 STS

hemu's picture

problem is solved after shringkling database..............client started cuming online............

Things are EASY with File Sharing....... It makes easy for Viruses also...!!

Symantec SEP11 STS
Symantec SNAC 11 STS

SOLUTION
Saufley's picture

I have a SEPM server, v.11.4202.75,  that is synced with my AD domain.  On this particular SEPM  I have 375 client servers being managed.  I have noticed that I am getting alerts to old virus definitions, or a lenghty amount of time since a client has checked-in. 

However, whenever I log directly into these clients and pull up their client consoles, I can verify that they are indeed checking-in, and have current virus signatures.  I am not using any additional SEPMs for load balancing or anything of that nature.

I have tried rebooting the server thinking that maybe the built-in database is not updating with the client information but this does not seem to be the case. 

Any suggestions would be greatly appreciated.

SESB - Saufley

hemu's picture

are using embeded database or MS SQL 2005........?

Things are EASY with File Sharing....... It makes easy for Viruses also...!!

Symantec SEP11 STS
Symantec SNAC 11 STS

ben_cSEPticons_secured's picture

Hi every one, i've experienced that too... Online status on the client side, but when you check in the console it is offline.. and vice versa.... i'm using an embeded database...

hemu's picture

try to use dbunload of ur issue is similar

Things are EASY with File Sharing....... It makes easy for Viruses also...!!

Symantec SEP11 STS
Symantec SNAC 11 STS

hemu's picture

hiiiiii again m/c started going offline................even shrink DB dont no wt is going wrong..........

Things are EASY with File Sharing....... It makes easy for Viruses also...!!

Symantec SEP11 STS
Symantec SNAC 11 STS

Coen66's picture

I suggest that you check the ports in the management server list. They were changed after an upgrade of SEPM.

bephan's picture

i am having a similar issue where i have just recently moved my SEP manager from the C: to the F: (C: was running low on diskspace);  I did a backup of the database, uninstall SEP and reinstall on F:; setup the database; restore the database; and now my clients are having issues with communicating with the server.  Server shows client is up but client shows server as being offline; I have exhausted all the test that I was able to find on the forum (sylink, ping, telnet, secars, IIS settings).  Can anyone help?  Thanks

Manish vats's picture
  Solution for SEP updation through the SEPM server. 
 
 
Problem :- If SEP cleient is not taking update(Not showing green Dot and showing offline), Even it's able to ping the server also able to telnet the server.
 
resolution :-
 
1. Try to telnet the server on port 8014 (which you already given for client to server communication).
2. If you are able to telnet than export the sylink file from that group in which you want to communicate with your client. and try to replace the Sylink file on the client.
 
If both of the upper taks are working fine than just try to do the 
 
   Just go through the below mention link to check the communication from client to server is working properly or not :-
 
http://<SEPM-Server>:8014/secars/secars?hello,secars
 
Just copy and paste that link into your browser and see there should be a OK massage on the browser.
 
Note : Just replace the SEPM-SERVER into your server name or IP Address. For example :-
http://<164.100.x.x>:8014/secars/secars?hello,secars
 
If you got the OK msg it means communication with the SEPM server is ok.
 
Now try to collect the logs. in the logs you will get the exact error where is the problem exists. follow the below mention activity for collecting the logs :-
 
https://fileshare.symantec.com/, and use the following login ID and password.
 
Login ID: sytoggle
Password: SyTo66l3!
Download SyToggle.zip
 
Once you have downloaded the utility, please follow these instructions.
Note: The zip file is password protected.
Un-Zip Password: symantec
1. Extract the file to a new folder to a convenient location, such as the Desktop, using the un-zip password provided above.
2. Before continuing, please remember to export the Registry to create a backup!
3. Execute the tool by double clicking 'SyToggleON.exe'.
4. SyToggleON will create a Sylink.log file at C:\. Open the log file to view detailed information about the logged results.
5. To disable the SyLinkToggle utility execute the SyToggleOFF.exe utility. The log files will be written until this step is completed.
After completing the process please collect the file(Sylink.log from C drive) 
 
Chk the log file and see the error:-
Please refer the below document.
http://service1.symantec.com/support/ent-security.nsf/docid/2008051309225748
 
Also check that, If you are using any proxy server. than try to uncheck the proxy settings than try to update the policy.
 
If still you are having any problem than follow the Symantec artical :-
http://service1.symantec.com/support/ent-security.nsf/docid/2008051309225748
 
Take full backup of registry. 
Search and delete all the instances of SavedLegacySettings and DefaultConnectionSettings from registry.
Restart the machine and check.. IT SHOULD BE SHOWING ONLINE.. wink