Endpoint Protection

 View Only
Expand all | Collapse all

SEP client shows offline and shows online in SEPM console.

Migration User

Migration UserAug 19, 2009 11:21 PM

Migration User

Migration UserAug 20, 2009 09:55 AM

Migration User

Migration UserAug 30, 2009 11:42 AM

  • 1.  SEP client shows offline and shows online in SEPM console.

    Posted Jul 10, 2009 01:54 AM
    Symantec SEP client shows server offline and shows online in SEPM console also last chakin time is also carrect but police number is not correct please help me to solve this issue.


  • 2.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 10, 2009 03:52 AM
    copy the sylying file from the sepm console machine and past it sep client machine


  • 3.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 10, 2009 05:15 AM
    Delete the client from the SEPM console (Rt. Click the Client, click on Delete in the console).

    Then stop and start the SMC service on the affected client, and force it to run a policy update to the server.

    If this doesn't help, you'll need to perform a Sylink Drop, or copy the relevant Sylink file for that group from the SEPM and paste it in the installation folder of the affected client.

    The following 2 posts should also help you out in the same.

    https://www-secure.symantec.com/connect/forums/how-came-back-communications-clients

    https://www-secure.symantec.com/connect/forums/update-parent-server-sepm-without-reinstalling-new-installation-package

    HTH


  • 4.  RE: SEP client shows offline and shows online in SEPM console.

    Broadcom Employee
    Posted Jul 10, 2009 06:14 AM
    check the sylink monitor logs , see if it is trying to communicte with SEPM. I believe it is communicating hence green dot as well as last check in time in time. But still check for the sylink logs for more detail

    cheers
    Pete


  • 5.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 10, 2009 10:42 AM
    to copy pest sylink works but we cannot go with this as we have distrubuted SEP package to all over branchis and to change packag is not posibel

    also pesting sylink logs....
    07/10 19:23:10 [6112] Stored HostGUID=7BC113D80AE206AE012CE574D420A646; outlen=16
    07/10 19:23:10 [6112] <RestoreSettings>Stored UserGuid=0; outlen=2
    07/10 19:23:10 [6112] <mfn_DecodeSSN>Sygate-SSN=2283
    07/10 19:23:10 [6112] <mfn_DecodeSSN>Read CSN=2284
    07/10 19:23:10 [6112] Product Type=3,Major Ver=5,Minor Ver=2,Platform ID=34,OSType=50659874
    07/10 19:23:10 [6112] OS=Windows Server 2003 family Enterprise Edition; number=5.2.3790
    07/10 19:23:10 [6112] SyLinkCreateInstance => Instance created: 01D01D48 Registry path: SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK
    07/10 19:23:10 [6112] <GetOnlineNicInfo>:Netport Count=1
    07/10 19:23:10 [6112] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
    07/10 19:23:10 [6112] SyLinkCreateConfig => Created instance: 01D0F538
    07/10 19:23:10 [6112] UseNewConfig => Created m_hNewConfig: 01D0F538
    07/10 19:23:10 [6112] Importing ConfigObject: 01D00AA8 into: 01D0F538
    07/10 19:23:10 [6112] Importing ConfigObject: 01D00AA8 into: 01D0D290
    07/10 19:23:10 [6112] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    07/10 19:23:10 [6112] SSA packageType is set as 105
    07/10 19:23:10 [6112] SyLinkDeleteConfig => Deleting instance: 01D00AA8
    07/10 19:23:10 [6112] <SetHiStatus>HI status is changed to=3; reason=0; rule=Host Integrity check is disabled.
    Host Integrity policy has been disabled by the administrator.
    07/10 19:23:12 [6112] SyLinkCreateConfig => Created instance: 03BB0680
    07/10 19:23:12 [6112] SetCurLocationName: Name is set to - Default
    07/10 19:23:12 [6112] SetCurLocationID: ID is set to - EEDFFB760AE206AE00A1C95D29C0D878
    07/10 19:23:12 [6112] SyLinkCreateConfig => Created instance: 03B3B938
    07/10 19:23:12 [6112] Importing ConfigObject: 03B3B938 into: 01D0F538
    07/10 19:23:12 [6112] Importing ConfigObject: 03B3B938 into: 01D0D290
    07/10 19:23:12 [6112] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    07/10 19:23:12 [6112] SyLinkDeleteConfig => Deleting instance: 03B3B938
    07/10 19:23:13 [6112] SyLinkDeleteConfig => Deleting instance: 03BB0680
    07/10 19:23:14 [6112] <CSyLink::Start()>
    07/10 19:23:14 [6112] <CSyLink::ImportConfigFile()>
    07/10 19:23:14 [6112] </CSyLink::ImportConfigFile()>
    07/10 19:23:14 [6112] <GetDomainHostName>msz_DomainName is taken from szDomainName
    07/10 19:23:14 [6112] <GetDomainHostName>DomainName (Final)=hbctxdom.com
    07/10 19:23:14 [6112] *********Netport Count=1
    07/10 19:23:14 [6112] Physical: Local Area Connection::00-06-5b-3b-5c-1a::broadcom netxtreme gigabit ethernet
    07/10 19:23:14 [6112] MAC=00-06-5b-3b-5c-1a# Wireless=
    07/10 19:23:14 [6112] Hardwire String=00-06-5b-3b-5c-1a#
    07/10 19:23:14 [5648] <HeartbeatThreadProc:>Thread is about to begin..
    07/10 19:23:14 [2760] Successfully created the heartbeat thread
    07/10 19:23:14 [6112] <Start>Started, contact SMS every 3600 seconds
    07/10 19:23:14 [6112] <PostEvent>going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    07/10 19:23:14 [6112] <PostEvent>done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0
    07/10 19:23:14 [252] <CExpBackoff::CExpBackoff()>
    07/10 19:23:14 [252] </CExpBackoff::CExpBackoff()>
    07/10 19:23:14 [5648] <CheckHeartbeatTimer>====== Heartbeat loop starts at 19:23:14 ======
    07/10 19:23:15 [6112] <SetClientAuth>Received new User/Domain from SMC.. User: Administrator User Domain: HBSEP11POC
    07/10 19:23:15 [6112] <SetClientAuth>Getting RDNS Domain Name (user domain in AD setup)..
    07/10 19:23:15 [6112] <GetLoginRdnsDomain>DNS domain=
    07/10 19:23:15 [6112] <SetClientAuth>Checking if the new user domain name is the same as Local Host ..
    07/10 19:23:15 [6112] <SetClientAuth>HostName=hbsep11poc
    07/10 19:23:15 [6112] <SetClientAuth>New User DomainName=hbsep11poc
    07/10 19:23:15 [6112] <SetClientAuth>User Domain name is same as Host name .. Setting 'Login Domain' to =LocalComputer
    07/10 19:23:15 [6112] <SetClientAuth>Logged in user info set to: LocalComputer/Administrator
    07/10 19:23:15 [6112] <SetClientAuth>Marking User Change Notify to redo registration..
    07/10 19:23:15 [5648] <GetOnlineNicInfo>:Netport Count=1
    07/10 19:23:15 [5648] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
    07/10 19:23:15 [4128] SyLinkCreateConfig => Created instance: 01C8E008
    07/10 19:23:15 [4128] Importing ConfigObject: 01D0D290 into: 01C8E008
    07/10 19:23:15 [4128] SyLinkDeleteConfig => Deleting instance: 01C8E008
    07/10 19:23:15 [5648] <CalcAgentHashKey>:CH=5AEE5DC40AE206AE014D9F9F6717E8631hbsep11pochbctxdom.com5A146C8DCD9904840E934D06C7433D5C
    07/10 19:23:15 [5648] <CalcAgentHashKey>:CHKey=19AD0AA9694E2F43266CDF7F839C688B
    07/10 19:23:15 [5648] <CalcAgentHashKey>:C=5AEE5DC40AE206AE014D9F9F6717E8631hbsep11pochbctxdom.com
    07/10 19:23:15 [5648] <CalcAgentHashKey>:CKey=D2720C16A868E874343B810E7AA9CD94
    07/10 19:23:15 [5648] <CalcAgentHashKey>:UCH=5AEE5DC40AE206AE014D9F9F6717E8630AdministratorLocalComputerhbsep11pochbctxdom.com5A146C8DCD9904840E934D06C7433D5C
    07/10 19:23:15 [5648] <CalcAgentHashKey>:UCHKey=8CA6728FD0CCE3E7B79F618E206B1E2A
    07/10 19:23:15 [5648] <CalcAgentHashKey>:UC=5AEE5DC40AE206AE014D9F9F6717E8630AdministratorLocalComputerhbsep11pochbctxdom.com
    07/10 19:23:15 [5648] <CalcAgentHashKey>:UCKey=1F1CD88C034A0E7AE90AE0CD0A98DDFF
    07/10 19:23:15 [5648] <DoHeartbeat>HardwareID=5A146C8DCD9904840E934D06C7433D5C
    07/10 19:23:15 [5648] <DoHeartbeat>CHKey=19AD0AA9694E2F43266CDF7F839C688B
    07/10 19:23:15 [5648] <DoHeartbeat>CKey=D2720C16A868E874343B810E7AA9CD94
    07/10 19:23:15 [5648] <DoHeartbeat>UCHKey=8CA6728FD0CCE3E7B79F618E206B1E2A
    07/10 19:23:15 [5648] <DoHeartbeat>UCKey=1F1CD88C034A0E7AE90AE0CD0A98DDFF
    07/10 19:23:15 [5648] <DoHeartbeat> Set heartbeat event
    07/10 19:23:15 [5648] Use new configuration
    07/10 19:23:15 [5648] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 19:23:15 ======
    07/10 19:23:16 [5648] HEARTBEAT: Check Point 1
    07/10 19:23:16 [5648] HEARTBEAT: Check Point 2
    07/10 19:23:16 [5648] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    07/10 19:23:16 [5648] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    07/10 19:23:16 [5648] HEARTBEAT: Check Point 3
    07/10 19:23:16 [5648] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
    07/10 19:23:16 [5648] HEARTBEAT: Check Point 4
    07/10 19:23:16 [5648] <RegHeartbeatProc>===Registration STAGE===
    07/10 19:23:16 [5648] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator
    07/10 19:23:16 [5648] <MakeRegisterData:>XML data: <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="5AEE5DC40AE206AE014D9F9F6717E863" AgentType="105" UserDomain="LocalComputer" LoginUser="Administrator" ComputerDomain="hbctxdom.com" ComputerName="hbsep11poc" PreferredGroup="My%20Company%5cHDFC_Global_MR3_Client" PreferredMode="1" HardwareKey="5A146C8DCD9904840E934D06C7433D5C" SiteDomainName=""/>
    <SSAHostInfo><NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="hbctxdom.com" HostName="hbsep11poc" HostDesc="" />
    <SSAProduct Version="11.0.3001.2224" />
    <SSAOS Version="5.2.3790" Desc="Windows%20Server%202003%20family%20Enterprise%20Edition" Type="50659874" ServicePack="Service%20Pack%202"/>
    <Processor ProcessorType="x86%20Family%206%20Model%2011%20Stepping%204" ProcessorClock="1396" ProcessorNum="2"/>
    <Memory Size="2146910208"/>
    <BIOS Version="DELL%20%20%20-%201"/>
    <TpmDevice Id="0"/>
    <SSAProfile Version="5.0.0" SerialNumber="AAC0-12%2f04%2f2008%2020%3a04%3a32%20750"/>
    <SSAIDS Version="" SerialNumber=""/>
    <SSAUTC Bias="-330" />
    <DNSs><DNS Address="202.54.1.18"/><DNS Address="202.54.1.30"/></DNSs>
    <SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
    </SSAHostInfo>
    </SSARegData>
    07/10 19:23:16 [5648] <SyLink>[MakeRegisterData] registration Hardware Key=5A146C8DCD9904840E934D06C7433D5C
    07/10 19:23:16 [5648] ************Reg CSN=1
    07/10 19:23:16 [5648] <mfn_GenPostData (for Registration):>Request is: s_origin_length: 1279
    s_session_id: 5A146C8DCD9904840E934D06C7433D5C
    Sygate-SSN: 1
    <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="5AEE5DC40AE206AE014D9F9F6717E863" AgentType="105" UserDomain="LocalComputer" LoginUser="Administrator" ComputerDomain="hbctxdom.com" ComputerName="hbsep11poc" PreferredGroup="My%20Company%5cHDFC_Global_MR3_Client" PreferredMode="1" HardwareKey="5A146C8DCD9904840E934D06C7433D5C" SiteDomainName=""/>
    <SSAHostInfo><NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="hbctxdom.com" HostName="hbsep11poc" HostDesc="" />
    <SSAProduct Version="11.0.3001.2224" />
    <SSAOS Version="5.2.3790" Desc="Windows%20Server%202003%20family%20Enterprise%20Edition" Type="50659874" ServicePack="Service%20Pack%202"/>
    <Processor ProcessorType="x86%20Family%206%20Model%2011%20Stepping%204" ProcessorClock="1396" ProcessorNum="2"/>
    <Memory Size="2146910208"/>
    <BIOS Version="DELL%20%20%20-%201"/>
    <TpmDevice Id="0"/>
    <SSAProfile Version="5.0.0" SerialNumber="AAC0-12%2f04%2f2008%2020%3a04%3a32%20750"/>
    <SSAIDS Version="" SerialNumber=""/>
    <SSAUTC Bias="-330" />
    <DNSs><DNS Address="202.54.1.18"/><DNS Address="202.54.1.30"/></DNSs>
    <SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
    </SSAHostInfo>
    </SSARegData>
    07/10 19:23:16 [5648] <SendRegistrationRequest:>http://10.226.6.174:801V–¤l óó7D#‹‚;¬ƒîp Ñ^h‘#î@SXìï Ús>š§0°²òWtÛØÄŠ¢È¡ËÀðÁÆ´^=FØ–Žã†¤ ¦H@=÷ÈöñAOʲ3ðÀ’¥›g(÷wè¨EØ„q»È¤$‹c`Œ%ï1—*+Œ1f­;üÑ
    êAÖ¾™8Ží1»s“¥5»ý7O¸=&Wó„b“%AdAv#j§bA^l?(¿@¥èø‘GÞ|×=úºj¦,Àj€
    ¯ÇNC}€—Ò»õ*8-—Ïr¦UÖŸ°lØv—Àµ”›Ò\¢ýÕÑ¢P#¤iãgÓúm¥;¡kó
    07/10 19:23:16 [5648] 19:23:16=>Send HTTP REQUEST
    07/10 19:23:16 [5648] 19:23:16=>HTTP REQUEST sent
    07/10 19:23:16 [5648] 19:23:16=>QUERY return code
    07/10 19:23:16 [5648] 19:23:16=>QUERY return code completed
    07/10 19:23:16 [5648] <SendRegistrationRequest:>SMS return=468
    07/10 19:23:16 [5648] <ParseHTTPStatusCode:>468=>468 Request not allowed
    07/10 19:23:16 [5648] <SendRegistrationRequest:>Content Lenght => 48
    07/10 19:23:16 [5648] <mfn_DecodeSSN>Sygate-SSN=1677
    07/10 19:23:16 [5648] <mfn_DecodeSSN>Read CSN=1678
    07/10 19:23:16 [5648] HTTP returns status code=468
    07/10 19:23:16 [5648] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
    07/10 19:23:16 [5648] <SendRegistrationRequest:>COMPLETED
    07/10 19:23:16 [5648] HEARTBEAT: Check Point 5.1
    07/10 19:23:16 [5648] <RegHeartbeatProc>switch to another server
    07/10 19:23:16 [5648] HEARTBEAT: Check Point 9
    07/10 19:23:16 [5648] HEARTBEAT: Check Point 8
    07/10 19:23:16 [5648] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    07/10 19:23:16 [5648] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    07/10 19:23:17 [5648] HEARTBEAT: Check Point 1
    07/10 19:23:17 [5648] HEARTBEAT: Check Point 2
    07/10 19:23:17 [5648] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    07/10 19:23:17 [5648] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    07/10 19:23:17 [5648] HEARTBEAT: Check Point 3
    07/10 19:23:17 [5648] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
    07/10 19:23:17 [5648] HEARTBEAT: Check Point 4
    07/10 19:23:17 [5648] <RegHeartbeatProc>===Registration STAGE===
    07/10 19:23:17 [5648] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator
    07/10 19:23:17 [5648] <MakeRegisterData:>XML data: <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="5AEE5DC40AE206AE014D9F9F6717E863" AgentType="105" UserDomain="LocalComputer" LoginUser="Administrator" ComputerDomain="hbctxdom.com" ComputerName="hbsep11poc" PreferredGroup="My%20Company%5cHDFC_Global_MR3_Client" PreferredMode="1" HardwareKey="5A146C8DCD9904840E934D06C7433D5C" SiteDomainName=""/>
    <SSAHostInfo><NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="hbctxdom.com" HostName="hbsep11poc" HostDesc="" />
    <SSAProduct Version="11.0.3001.2224" />
    <SSAOS Version="5.2.3790" Desc="Windows%20Server%202003%20family%20Enterprise%20Edition" Type="50659874" ServicePack="Service%20Pack%202"/>
    <Processor ProcessorType="x86%20Family%206%20Model%2011%20Stepping%204" ProcessorClock="1396" ProcessorNum="2"/>
    <Memory Size="2146910208"/>
    <BIOS Version="DELL%20%20%20-%201"/>
    <TpmDevice Id="0"/>
    <SSAProfile Version="5.0.0" SerialNumber="AAC0-12%2f04%2f2008%2020%3a04%3a32%20750"/>
    <SSAIDS Version="" SerialNumber=""/>
    <SSAUTC Bias="-330" />
    <DNSs><DNS Address="202.54.1.18"/><DNS Address="202.54.1.30"/></DNSs>
    <SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
    </SSAHostInfo>
    </SSARegData>
    07/10 19:23:17 [5648] <SyLink>[MakeRegisterData] registration Hardware Key=5A146C8DCD9904840E934D06C7433D5C
    07/10 19:23:17 [5648] ************Reg CSN=1679
    07/10 19:23:17 [5648] <mfn_GenPostData (for Registration):>Request is: s_origin_length: 1279
    s_session_id: 5A146C8DCD9904840E934D06C7433D5C
    Sygate-SSN: 1679
    <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="5AEE5DC40AE206AE014D9F9F6717E863" AgentType="105" UserDomain="LocalComputer" LoginUser="Administrator" ComputerDomain="hbctxdom.com" ComputerName="hbsep11poc" PreferredGroup="My%20Company%5cHDFC_Global_MR3_Client" PreferredMode="1" HardwareKey="5A146C8DCD9904840E934D06C7433D5C" SiteDomainName=""/>
    <SSAHostInfo><NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="hbctxdom.com" HostName="hbsep11poc" HostDesc="" />
    <SSAProduct Version="11.0.3001.2224" />
    <SSAOS Version="5.2.3790" Desc="Windows%20Server%202003%20family%20Enterprise%20Edition" Type="50659874" ServicePack="Service%20Pack%202"/>
    <Processor ProcessorType="x86%20Family%206%20Model%2011%20Stepping%204" ProcessorClock="1396" ProcessorNum="2"/>
    <Memory Size="2146910208"/>
    <BIOS Version="DELL%20%20%20-%201"/>
    <TpmDevice Id="0"/>
    <SSAProfile Version="5.0.0" SerialNumber="AAC0-12%2f04%2f2008%2020%3a04%3a32%20750"/>
    <SSAIDS Version="" SerialNumber=""/>
    <SSAUTC Bias="-330" />
    <DNSs><DNS Address="202.54.1.18"/><DNS Address="202.54.1.30"/></DNSs>
    <SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
    </SSAHostInfo>
    </SSARegData>
    07/10 19:23:17 [5648] <SendRegistrationRequest:>http://10.226.6.175:801V–¤l óó7D#‹‚;¬ƒîp Ñ^h‘#î@SXìï Ús>š§0°²òWtÛØÄŠ¢È¡ËÀðÁÆ´^=FØ–Žã†¤ ¦H@ë9^‰,¾€jc[#¾-Óå·²!ªL®HÁUÆ݁m/ýn»Á¿q){¢å ¹þéBYªu[–ðI`+H
    O„ˆÎ›8}iŠž&‰d«Î©t梌!ùI|»WBvضuþsøyÿs˜â}Ì•ÒD7ËãV¶Ì⎀}ÉA
    򌳇
    07/10 19:23:17 [5648] 19:23:17=>Send HTTP REQUEST
    07/10 19:23:17 [5648] 19:23:17=>HTTP REQUEST sent
    07/10 19:23:17 [5648] 19:23:17=>QUERY return code
    07/10 19:23:17 [5648] 19:23:17=>QUERY return code completed
    07/10 19:23:17 [5648] <SendRegistrationRequest:>SMS return=403
    07/10 19:23:17 [5648] <ParseHTTPStatusCode:>403=>403 Forbidden
    07/10 19:23:17 [5648] <SendRegistrationRequest:>Content Lenght => 181
    07/10 19:23:17 [5648] HTTP returns status code=403
    07/10 19:23:17 [5648] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
    07/10 19:23:17 [5648] <SendRegistrationRequest:>COMPLETED
    07/10 19:23:17 [5648] HEARTBEAT: Check Point 5.1
    07/10 19:23:17 [5648] <RegHeartbeatProc>switch to another server
    07/10 19:23:17 [5648] HEARTBEAT: Check Point 9
    07/10 19:23:17 [5648] HEARTBEAT: Check Point 8
    07/10 19:23:17 [5648] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    07/10 19:23:17 [5648] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    07/10 19:23:17 [5648] HEARTBEAT: Check Point 1
    07/10 19:23:17 [5648] HEARTBEAT: Check Point 2
    07/10 19:23:17 [5648] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    07/10 19:23:17 [5648] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    07/10 19:23:17 [5648] HEARTBEAT: Check Point 3
    07/10 19:23:17 [5648] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
    07/10 19:23:17 [5648] HEARTBEAT: Check Point 4
    07/10 19:23:17 [5648] <RegHeartbeatProc>===Registration STAGE===
    07/10 19:23:17 [5648] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator
    07/10 19:23:17 [5648] <MakeRegisterData:>XML data: <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="5AEE5DC40AE206AE014D9F9F6717E863" AgentType="105" UserDomain="LocalComputer" LoginUser="Administrator" ComputerDomain="hbctxdom.com" ComputerName="hbsep11poc" PreferredGroup="My%20Company%5cHDFC_Global_MR3_Client" PreferredMode="1" HardwareKey="5A146C8DCD9904840E934D06C7433D5C" SiteDomainName=""/>
    <SSAHostInfo><NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="hbctxdom.com" HostName="hbsep11poc" HostDesc="" />
    <SSAProduct Version="11.0.3001.2224" />
    <SSAOS Version="5.2.3790" Desc="Windows%20Server%202003%20family%20Enterprise%20Edition" Type="50659874" ServicePack="Service%20Pack%202"/>
    <Processor ProcessorType="x86%20Family%206%20Model%2011%20Stepping%204" ProcessorClock="1396" ProcessorNum="2"/>
    <Memory Size="2146910208"/>
    <BIOS Version="DELL%20%20%20-%201"/>
    <TpmDevice Id="0"/>
    <SSAProfile Version="5.0.0" SerialNumber="AAC0-12%2f04%2f2008%2020%3a04%3a32%20750"/>
    <SSAIDS Version="" SerialNumber=""/>
    <SSAUTC Bias="-330" />
    <DNSs><DNS Address="202.54.1.18"/><DNS Address="202.54.1.30"/></DNSs>
    <SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
    </SSAHostInfo>
    </SSARegData>
    07/10 19:23:17 [5648] <SyLink>[MakeRegisterData] registration Hardware Key=5A146C8DCD9904840E934D06C7433D5C
    07/10 19:23:17 [5648] ************Reg CSN=1680
    07/10 19:23:17 [5648] <mfn_GenPostData (for Registration):>Request is: s_origin_length: 1279
    s_session_id: 5A146C8DCD9904840E934D06C7433D5C
    Sygate-SSN: 1680
    <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="5AEE5DC40AE206AE014D9F9F6717E863" AgentType="105" UserDomain="LocalComputer" LoginUser="Administrator" ComputerDomain="hbctxdom.com" ComputerName="hbsep11poc" PreferredGroup="My%20Company%5cHDFC_Global_MR3_Client" PreferredMode="1" HardwareKey="5A146C8DCD9904840E934D06C7433D5C" SiteDomainName=""/>
    <SSAHostInfo><NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="hbctxdom.com" HostName="hbsep11poc" HostDesc="" />
    <SSAProduct Version="11.0.3001.2224" />
    <SSAOS Version="5.2.3790" Desc="Windows%20Server%202003%20family%20Enterprise%20Edition" Type="50659874" ServicePack="Service%20Pack%202"/>
    <Processor ProcessorType="x86%20Family%206%20Model%2011%20Stepping%204" ProcessorClock="1396" ProcessorNum="2"/>
    <Memory Size="2146910208"/>
    <BIOS Version="DELL%20%20%20-%201"/>
    <TpmDevice Id="0"/>
    <SSAProfile Version="5.0.0" SerialNumber="AAC0-12%2f04%2f2008%2020%3a04%3a32%20750"/>
    <SSAIDS Version="" SerialNumber=""/>
    <SSAUTC Bias="-330" />
    <DNSs><DNS Address="202.54.1.18"/><DNS Address="202.54.1.30"/></DNSs>
    <SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
    </SSAHostInfo>
    </SSARegData>
    07/10 19:23:17 [5648] <SendRegistrationRequest:>http://10.225.6.118:801V–¤l óó7D#‹‚;¬ƒîp Ñ^h‘#î@SXìï Ús>š§0°²òWtÛØÄŠ¢È¡ËÀðÁÆ´^=FØ–Žã†¤ ¦H@€=jX¸‡s:={䲡B·²!ªL®HÁUÆ݁m/ýn»Á¿q){¢å ¹þéBYªu[–ðI`+H
    O„ˆÎ›8}iŠž&‰d«Î©t梌!ùI|»WBvضuþsøyÿs˜â}Ì•ÒD7ËãV¶Ì⎀}ÉA
    򌳇
    07/10 19:23:17 [5648] 19:23:17=>Send HTTP REQUEST
    07/10 19:23:17 [5648] 19:23:17=>HTTP REQUEST sent
    07/10 19:23:17 [5648] 19:23:17=>QUERY return code
    07/10 19:23:17 [5648] 19:23:17=>QUERY return code completed
    07/10 19:23:17 [5648] <SendRegistrationRequest:>SMS return=404
    07/10 19:23:17 [5648] <ParseHTTPStatusCode:>404=>404 Not Found
    07/10 19:23:17 [5648] <SendRegistrationRequest:>Content Lenght => 1635
    07/10 19:23:17 [5648] HTTP returns status code=404
    07/10 19:23:17 [5648] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
    07/10 19:23:17 [5648] <SendRegistrationRequest:>COMPLETED
    07/10 19:23:17 [5648] HEARTBEAT: Check Point 5.1
    07/10 19:23:17 [5648] <RegHeartbeatProc>switch to another server
    07/10 19:23:17 [5648] HEARTBEAT: Check Point 9
    07/10 19:23:17 [5648] HEARTBEAT: Check Point 8
    07/10 19:23:17 [5648] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    07/10 19:23:17 [5648] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    07/10 19:23:18 [5648] HEARTBEAT: Check Point 1
    07/10 19:23:18 [5648] HEARTBEAT: Check Point 2
    07/10 19:23:18 [5648] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    07/10 19:23:18 [5648] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    07/10 19:23:18 [5648] HEARTBEAT: Check Point 3
    07/10 19:23:18 [5648] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
    07/10 19:23:18 [5648] HEARTBEAT: Check Point 4
    07/10 19:23:18 [5648] <RegHeartbeatProc>===Registration STAGE===
    07/10 19:23:18 [5648] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator
    07/10 19:23:18 [5648] <MakeRegisterData:>XML data: <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="5AEE5DC40AE206AE014D9F9F6717E863" AgentType="105" UserDomain="LocalComputer" LoginUser="Administrator" ComputerDomain="hbctxdom.com" ComputerName="hbsep11poc" PreferredGroup="My%20Company%5cHDFC_Global_MR3_Client" PreferredMode="1" HardwareKey="5A146C8DCD9904840E934D06C7433D5C" SiteDomainName=""/>
    <SSAHostInfo><NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="hbctxdom.com" HostName="hbsep11poc" HostDesc="" />
    <SSAProduct Version="11.0.3001.2224" />
    <SSAOS Version="5.2.3790" Desc="Windows%20Server%202003%20family%20Enterprise%20Edition" Type="50659874" ServicePack="Service%20Pack%202"/>
    <Processor ProcessorType="x86%20Family%206%20Model%2011%20Stepping%204" ProcessorClock="1396" ProcessorNum="2"/>
    <Memory Size="2146910208"/>
    <BIOS Version="DELL%20%20%20-%201"/>
    <TpmDevice Id="0"/>
    <SSAProfile Version="5.0.0" SerialNumber="AAC0-12%2f04%2f2008%2020%3a04%3a32%20750"/>
    <SSAIDS Version="" SerialNumber=""/>
    <SSAUTC Bias="-330" />
    <DNSs><DNS Address="202.54.1.18"/><DNS Address="202.54.1.30"/></DNSs>
    <SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
    </SSAHostInfo>
    </SSARegData>
    07/10 19:23:18 [5648] <SyLink>[MakeRegisterData] registration Hardware Key=5A146C8DCD9904840E934D06C7433D5C
    07/10 19:23:18 [5648] ************Reg CSN=1681
    07/10 19:23:18 [5648] <mfn_GenPostData (for Registration):>Request is: s_origin_length: 1279
    s_session_id: 5A146C8DCD9904840E934D06C7433D5C
    Sygate-SSN: 1681
    <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="5AEE5DC40AE206AE014D9F9F6717E863" AgentType="105" UserDomain="LocalComputer" LoginUser="Administrator" ComputerDomain="hbctxdom.com" ComputerName="hbsep11poc" PreferredGroup="My%20Company%5cHDFC_Global_MR3_Client" PreferredMode="1" HardwareKey="5A146C8DCD9904840E934D06C7433D5C" SiteDomainName=""/>
    <SSAHostInfo><NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="hbctxdom.com" HostName="hbsep11poc" HostDesc="" />
    <SSAProduct Version="11.0.3001.2224" />
    <SSAOS Version="5.2.3790" Desc="Windows%20Server%202003%20family%20Enterprise%20Edition" Type="50659874" ServicePack="Service%20Pack%202"/>
    <Processor ProcessorType="x86%20Family%206%20Model%2011%20Stepping%204" ProcessorClock="1396" ProcessorNum="2"/>
    <Memory Size="2146910208"/>
    <BIOS Version="DELL%20%20%20-%201"/>
    <TpmDevice Id="0"/>
    <SSAProfile Version="5.0.0" SerialNumber="AAC0-12%2f04%2f2008%2020%3a04%3a32%20750"/>
    <SSAIDS Version="" SerialNumber=""/>
    <SSAUTC Bias="-330" />
    <DNSs><DNS Address="202.54.1.18"/><DNS Address="202.54.1.30"/></DNSs>
    <SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
    </SSAHostInfo>
    </SSARegData>
    07/10 19:23:18 [5648] <SendRegistrationRequest:>http://10.225.6.119:801V–¤l óó7D#‹‚;¬ƒîp Ñ^h‘#î@SXìï Ús>š§0°²òWtÛØÄŠ¢È¡ËÀðÁÆ´^=FØ–Žã†¤ ¦H@&ˆ¤C¿ÝÈ¿,Ÿ– ÇN>·²!ªL®HÁUÆ݁m/ýn»Á¿q){¢å ¹þéBYªu[–ðI`+H
    O„ˆÎ›8}iŠž&‰d«Î©t梌!ùI|»WBvضuþsøyÿs˜â}Ì•ÒD7ËãV¶Ì⎀}ÉA
    򌳇
    07/10 19:23:18 [5648] 19:23:18=>Send HTTP REQUEST
    07/10 19:23:18 [5648] 19:23:18=>HTTP REQUEST sent
    07/10 19:23:18 [5648] 19:23:18=>QUERY return code
    07/10 19:23:18 [5648] 19:23:18=>QUERY return code completed
    07/10 19:23:18 [5648] <SendRegistrationRequest:>SMS return=404
    07/10 19:23:18 [5648] <ParseHTTPStatusCode:>404=>404 Not Found
    07/10 19:23:18 [5648] <SendRegistrationRequest:>Content Lenght => 1635
    07/10 19:23:18 [5648] HTTP returns status code=404
    07/10 19:23:18 [5648] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
    07/10 19:23:18 [5648] <SendRegistrationRequest:>COMPLETED
    07/10 19:23:18 [5648] HEARTBEAT: Check Point 5.1
    07/10 19:23:18 [5648] <ScheduleNextUpdate>new scheduled heartbeat=32 seconds
    07/10 19:23:18 [5648] HEARTBEAT: Check Point 8
    07/10 19:23:18 [5648] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    07/10 19:23:18 [5648] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    07/10 19:23:18 [5648] <RegHeartbeatProc>====== Registration Procedure stops at 19:23:18 ======
    07/10 19:23:18 [5648] HEARTBEAT: Check Point 10
    07/10 19:23:18 [5648] HEARTBEAT: Check Point Complete
    07/10 19:23:18 [5648] <RegHeartbeatProc>Done, Heartbeat=32seconds
    07/10 19:23:18 [5648] HeartbeatProcFailed to get profile with proxy setting 1
    07/10 19:23:18 [5648] <CheckHeartbeatTimer>====== Heartbeat loop stops at 19:23:18 ======
    07/10 19:23:51 [5648] <CheckHeartbeatTimer>====== Heartbeat loop starts at 19:23:51 ======
    07/10 19:23:52 [5648] <GetOnlineNicInfo>:Netport Count=1
    07/10 19:23:52 [5648] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
    07/10 19:23:52 [5648] <CalcAgentHashKey>:CH=5AEE5DC40AE206AE014D9F9F6717E8631hbsep11pochbctxdom.com5A146C8DCD9904840E934D06C7433D5C
    07/10 19:23:52 [5648] <CalcAgentHashKey>:CHKey=19AD0AA9694E2F43266CDF7F839C688B
    07/10 19:23:52 [5648] <CalcAgentHashKey>:C=5AEE5DC40AE206AE014D9F9F6717E8631hbsep11pochbctxdom.com
    07/10 19:23:52 [5648] <CalcAgentHashKey>:CKey=D2720C16A868E874343B810E7AA9CD94
    07/10 19:23:52 [5648] <CalcAgentHashKey>:UCH=5AEE5DC40AE206AE014D9F9F6717E8630AdministratorLocalComputerhbsep11pochbctxdom.com5A146C8DCD9904840E934D06C7433D5C
    07/10 19:23:52 [5648] <CalcAgentHashKey>:UCHKey=8CA6728FD0CCE3E7B79F618E206B1E2A
    07/10 19:23:52 [5648] <CalcAgentHashKey>:UC=5AEE5DC40AE206AE014D9F9F6717E8630AdministratorLocalComputerhbsep11pochbctxdom.com
    07/10 19:23:52 [5648] <CalcAgentHashKey>:UCKey=1F1CD88C034A0E7AE90AE0CD0A98DDFF
    07/10 19:23:52 [5648] <DoHeartbeat>HardwareID=5A146C8DCD9904840E934D06C7433D5C
    07/10 19:23:52 [5648] <DoHeartbeat>CHKey=19AD0AA9694E2F43266CDF7F839C688B
    07/10 19:23:52 [5648] <DoHeartbeat>CKey=D2720C16A868E874343B810E7AA9CD94
    07/10 19:23:52 [5648] <DoHeartbeat>UCHKey=8CA6728FD0CCE3E7B79F618E206B1E2A
    07/10 19:23:52 [5648] <DoHeartbeat>UCKey=1F1CD88C034A0E7AE90AE0CD0A98DDFF
    07/10 19:23:52 [5648] <DoHeartbeat> Set heartbeat event
    07/10 19:23:52 [5648] Use new configuration
    07/10 19:23:52 [5648] <CSyLink::IndexHeartbeatProc()>
    07/10 19:23:52 [5648] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 01D0D290
    07/10 19:23:52 [5648] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 19:23:52 ======
    07/10 19:23:52 [5648] HEARTBEAT: Check Point 1
    07/10 19:23:52 [5648] Get First Server!
    07/10 19:23:52 [5648] HEARTBEAT: Check Point 2
    07/10 19:23:52 [5648] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    07/10 19:23:52 [5648] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    07/10 19:23:52 [5648] HEARTBEAT: Check Point 3
    07/10 19:23:52 [5648] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
    07/10 19:23:52 [5648] HEARTBEAT: Check Point 4
    07/10 19:23:52 [5648] <IndexHeartbeatProc>===Get Index STAGE===
    07/10 19:23:52 [5648] ************CSN=2285
    07/10 19:23:52 [5648] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=7BC113D80AE206AE012CE574D420A646&chk=19AD0AA9694E2F43266CDF7F839C688B&ck=D2720C16A868E874343B810E7AA9CD94&uchk=8CA6728FD0CCE3E7B79F618E206B1E2A&uck=1F1CD88C034A0E7AE90AE0CD0A98DDFF&hid=5A146C8DCD9904840E934D06C7433D5C&groupid=5AEE5DC40AE206AE014D9F9F6717E863&mode=0&hbt=3600&as=2285&cn=[hex]68627365703131706F63&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    07/10 19:23:52 [5648] <GetIndexFileRequest:>http://10.226.6.174:80/secars/secars.dll?h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
    07/10 19:23:52 [5648] 19:23:52=>Send HTTP REQUEST
    07/10 19:23:52 [5648] 19:23:52=>HTTP REQUEST sent
    07/10 19:23:52 [5648] <GetIndexFileRequest:>SMS return=407
    07/10 19:23:52 [5648] <ParseHTTPStatusCode:>407=>Uninterpreted Status
    07/10 19:23:52 [5648] HTTP returns status code=407
    07/10 19:23:52 [5648] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
    07/10 19:23:52 [5648] <GetIndexFileRequest:>COMPLETED
    07/10 19:23:52 [5648] <IndexHeartbeatProc>GetIndexFile handling status: 407
    07/10 19:23:52 [5648] <IndexHeartbeatProc>Switch Server flag=1
    07/10 19:23:52 [5648] HEARTBEAT: Check Point 5.1
    07/10 19:23:52 [5648] <ScheduleNextUpdate>new scheduled heartbeat=64 seconds
    07/10 19:23:52 [5648] HEARTBEAT: Check Point 8
    07/10 19:23:52 [5648] Get Next Server!
    07/10 19:23:52 [5648] <IndexHeartbeatProc>switch to another server
    07/10 19:23:52 [5648] <DecrementScheduleTime:>New scheduled heartbeat=32 seconds
    07/10 19:23:53 [5648] HEARTBEAT: Check Point 1
    07/10 19:23:53 [5648] HEARTBEAT: Check Point 2
    07/10 19:23:53 [5648] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    07/10 19:23:53 [5648] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    07/10 19:23:53 [5648] HEARTBEAT: Check Point 3
    07/10 19:23:53 [5648] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
    07/10 19:23:53 [5648] HEARTBEAT: Check Point 4
    07/10 19:23:53 [5648] <IndexHeartbeatProc>===Get Index STAGE===
    07/10 19:23:53 [5648] ************CSN=2286
    07/10 19:23:53 [5648] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=7BC113D80AE206AE012CE574D420A646&chk=19AD0AA9694E2F43266CDF7F839C688B&ck=D2720C16A868E874343B810E7AA9CD94&uchk=8CA6728FD0CCE3E7B79F618E206B1E2A&uck=1F1CD88C034A0E7AE90AE0CD0A98DDFF&hid=5A146C8DCD9904840E934D06C7433D5C&groupid=5AEE5DC40AE206AE014D9F9F6717E863&mode=0&hbt=3600&as=2286&cn=[hex]68627365703131706F63&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    07/10 19:23:53 [5648] <GetIndexFileRequest:>http://10.226.6.175:80/secars/secars.dll?h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
    07/10 19:23:53 [5648] 19:23:53=>Send HTTP REQUEST
    07/10 19:23:53 [5648] 19:23:53=>HTTP REQUEST sent
    07/10 19:23:53 [5648] <GetIndexFileRequest:>SMS return=407
    07/10 19:23:53 [5648] <ParseHTTPStatusCode:>407=>Uninterpreted Status
    07/10 19:23:53 [5648] HTTP returns status code=407
    07/10 19:23:53 [5648] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
    07/10 19:23:53 [5648] <GetIndexFileRequest:>COMPLETED
    07/10 19:23:53 [5648] <IndexHeartbeatProc>GetIndexFile handling status: 407
    07/10 19:23:53 [5648] <IndexHeartbeatProc>Switch Server flag=1
    07/10 19:23:53 [5648] HEARTBEAT: Check Point 5.1
    07/10 19:23:53 [5648] <ScheduleNextUpdate>new scheduled heartbeat=64 seconds
    07/10 19:23:53 [5648] HEARTBEAT: Check Point 8
    07/10 19:23:53 [5648] Get Next Server!
    07/10 19:23:53 [5648] <IndexHeartbeatProc>switch to another server
    07/10 19:23:53 [5648] <DecrementScheduleTime:>New scheduled heartbeat=32 seconds
    07/10 19:23:53 [5648] HEARTBEAT: Check Point 1
    07/10 19:23:53 [5648] HEARTBEAT: Check Point 2
    07/10 19:23:53 [5648] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    07/10 19:23:53 [5648] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    07/10 19:23:53 [5648] HEARTBEAT: Check Point 3
    07/10 19:23:53 [5648] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
    07/10 19:23:53 [5648] HEARTBEAT: Check Point 4
    07/10 19:23:53 [5648] <IndexHeartbeatProc>===Get Index STAGE===
    07/10 19:23:53 [5648] ************CSN=2287
    07/10 19:23:53 [5648] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=7BC113D80AE206AE012CE574D420A646&chk=19AD0AA9694E2F43266CDF7F839C688B&ck=D2720C16A868E874343B810E7AA9CD94&uchk=8CA6728FD0CCE3E7B79F618E206B1E2A&uck=1F1CD88C034A0E7AE90AE0CD0A98DDFF&hid=5A146C8DCD9904840E934D06C7433D5C&groupid=5AEE5DC40AE206AE014D9F9F6717E863&mode=0&hbt=3600&as=2287&cn=[hex]68627365703131706F63&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    07/10 19:23:53 [5648] <GetIndexFileRequest:>http://10.225.6.119:80/secars/secars.dll?h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
    07/10 19:23:53 [5648] 19:23:53=>Send HTTP REQUEST
    07/10 19:23:53 [5648] 19:23:53=>HTTP REQUEST sent
    07/10 19:23:53 [5648] <GetIndexFileRequest:>SMS return=407
    07/10 19:23:53 [5648] <ParseHTTPStatusCode:>407=>Uninterpreted Status
    07/10 19:23:53 [5648] HTTP returns status code=407
    07/10 19:23:53 [5648] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
    07/10 19:23:53 [5648] <GetIndexFileRequest:>COMPLETED
    07/10 19:23:53 [5648] <IndexHeartbeatProc>GetIndexFile handling status: 407
    07/10 19:23:53 [5648] <IndexHeartbeatProc>Switch Server flag=1
    07/10 19:23:53 [5648] HEARTBEAT: Check Point 5.1
    07/10 19:23:53 [5648] <ScheduleNextUpdate>new scheduled heartbeat=64 seconds
    07/10 19:23:53 [5648] HEARTBEAT: Check Point 8
    07/10 19:23:53 [5648] Get Next Server!
    07/10 19:23:53 [5648] <IndexHeartbeatProc>switch to another server
    07/10 19:23:53 [5648] <DecrementScheduleTime:>New scheduled heartbeat=32 seconds
    07/10 19:23:54 [5648] HEARTBEAT: Check Point 1
    07/10 19:23:54 [5648] HEARTBEAT: Check Point 2
    07/10 19:23:54 [5648] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    07/10 19:23:54 [5648] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    07/10 19:23:54 [5648] HEARTBEAT: Check Point 3
    07/10 19:23:54 [5648] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
    07/10 19:23:54 [5648] HEARTBEAT: Check Point 4
    07/10 19:23:54 [5648] <IndexHeartbeatProc>===Get Index STAGE===
    07/10 19:23:54 [5648] ************CSN=2288
    07/10 19:23:54 [5648] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=7BC113D80AE206AE012CE574D420A646&chk=19AD0AA9694E2F43266CDF7F839C688B&ck=D2720C16A868E874343B810E7AA9CD94&uchk=8CA6728FD0CCE3E7B79F618E206B1E2A&uck=1F1CD88C034A0E7AE90AE0CD0A98DDFF&hid=5A146C8DCD9904840E934D06C7433D5C&groupid=5AEE5DC40AE206AE014D9F9F6717E863&mode=0&hbt=3600&as=2288&cn=[hex]68627365703131706F63&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    07/10 19:23:54 [5648] <GetIndexFileRequest:>http://10.225.6.118:80/secars/secars.dll?h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
    07/10 19:23:54 [5648] 19:23:54=>Send HTTP REQUEST
    07/10 19:23:54 [5648] 19:23:54=>HTTP REQUEST sent
    07/10 19:23:54 [5648] <GetIndexFileRequest:>SMS return=407
    07/10 19:23:54 [5648] <ParseHTTPStatusCode:>407=>Uninterpreted Status
    07/10 19:23:54 [5648] HTTP returns status code=407
    07/10 19:23:54 [5648] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
    07/10 19:23:54 [5648] <GetIndexFileRequest:>COMPLETED
    07/10 19:23:54 [5648] <IndexHeartbeatProc>GetIndexFile handling status: 407
    07/10 19:23:54 [5648] <IndexHeartbeatProc>Switch Server flag=1
    07/10 19:23:54 [5648] HEARTBEAT: Check Point 5.1
    07/10 19:23:54 [5648] <ScheduleNextUpdate>new scheduled heartbeat=64 seconds
    07/10 19:23:54 [5648] HEARTBEAT: Check Point 8
    07/10 19:23:54 [5648] Get Next Server!
    07/10 19:23:54 [5648] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    07/10 19:23:54 [5648] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    07/10 19:23:54 [5648] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 19:23:54 ======
    07/10 19:23:54 [5648] <IndexHeartbeatProc>Set Heartbeat Result= 1
    07/10 19:23:54 [5648] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 1, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
    07/10 19:23:54 [5648] <IndexHeartbeatProc>Connection Failed! No. of tries = 1
    07/10 19:23:54 [5648] Use new configuration
    07/10 19:23:54 [5648] HEARTBEAT: Check Point Complete
    07/10 19:23:54 [5648] <IndexHeartbeatProc>Done, Heartbeat=64seconds
    07/10 19:23:54 [5648] </CSyLink::IndexHeartbeatProc()>
    07/10 19:23:54 [5648] HeartbeatProcFailed to get profile with proxy setting 2
    07/10 19:23:54 [5648] <CheckHeartbeatTimer>====== Heartbeat loop stops at 19:23:54 ======






  • 6.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 10, 2009 11:20 AM
    I think when you try to post something with special characters or chracters that cannot be displayed it doesn't get added..
    So can you cut and paste only part of logs..
    Also find for SMS Codes in the log like
    SMS 491,403,500 etc..

    Have you restored the database ??or have you rebuil the SEPM ?? 


  • 7.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 10, 2009 03:04 PM
    07/10 19:23:16 [5648] 19:23:16=>Send HTTP REQUEST
    07/10 19:23:16 [5648] 19:23:16=>HTTP REQUEST sent
    07/10 19:23:16 [5648] 19:23:16=>QUERY return code
    07/10 19:23:16 [5648] 19:23:16=>QUERY return code completed
    07/10 19:23:16 [5648] <SendRegistrationRequest:>SMS return=468
    07/10 19:23:16 [5648] <ParseHTTPStatusCode:>468=>468 Request not allowed
    07/10 19:23:16 [5648] <SendRegistrationRequest:>Content Lenght => 48
    07/10 19:23:16 [5648] <mfn_DecodeSSN>Sygate-SSN=1677
    07/10 19:23:16 [5648] <mfn_DecodeSSN>Read CSN=1678
    07/10 19:23:16 [5648] HTTP returns status code=468
    07/10 19:23:16 [5648] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
    07/10 19:23:16 [5648] <SendRegistrationRequest:>COMPLETED
    07/10 19:23:16 [5648] HEARTBEAT: Check Point 5.1
    07/10 19:23:16 [5648] <RegHeartbeatProc>switch to another server
    07/10 19:23:16 [5648] HEARTBEAT: Check Point 9
    07/10 19:23:16 [5648] HEARTBEAT: Check Point 8
    07/10 19:23:16 [5648] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    07/10 19:23:16 [5648] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    07/10 19:23:17 [5648] HEARTBEAT: Check Point 1
    07/10 19:23:17 [5648] HEARTBEAT: Check Point 2
    07/10 19:23:17 [5648] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    07/10 19:23:17 [5648] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    07/10 19:23:17 [5648] HEARTBEAT: Check Point 3
    07/10 19:23:17 [5648] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
    07/10 19:23:17 [5648] HEARTBEAT: Check Point 4
    07/10 19:23:17 [5648] <RegHeartbeatProc>===Registration STAGE===
    07/10 19:23:17 [5648] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator
    07/10 19:23:17 [5648] <MakeRegisterData:>XML d


  • 8.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 10, 2009 03:43 PM
    Hi,

    this piece of log is too short... take a longer record and attach it to the discussion.

    Regards,




  • 9.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 11, 2009 02:34 AM
    07/10 21:57:32 [5264] <ScheduleNextUpdate>Manually assigned heartbeat=1 seconds
    07/10 21:57:33 [4188] <CheckHeartbeatTimer>====== Heartbeat loop starts at 21:57:33 ======
    07/10 21:57:33 [4188] <GetOnlineNicInfo>:Netport Count=1
    07/10 21:57:33 [4188] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.1.4.112" Mac="00-06-5b-3b-5c-1a" Gateway="10.1.4.90" SubnetMask="0.0.0.0"/></SSANICs>
    07/10 21:57:33 [4188] <CalcAgentHashKey>:CH=5AEE5DC40AE206AE014D9F9F6717E8631hbsep11pochbctxdom.com5A146C8DCD9904840E934D06C7433D5C
    07/10 21:57:33 [4188] <CalcAgentHashKey>:CHKey=19AD0AA9694E2F43266CDF7F839C688B
    07/10 21:57:33 [4188] <CalcAgentHashKey>:C=5AEE5DC40AE206AE014D9F9F6717E8631hbsep11pochbctxdom.com
    07/10 21:57:33 [4188] <CalcAgentHashKey>:CKey=D2720C16A868E874343B810E7AA9CD94
    07/10 21:57:33 [4188] <CalcAgentHashKey>:UCH=5AEE5DC40AE206AE014D9F9F6717E8630AdministratorLocalComputerhbsep11pochbctxdom.com5A146C8DCD9904840E934D06C7433D5C
    07/10 21:57:33 [4188] <CalcAgentHashKey>:UCHKey=8CA6728FD0CCE3E7B79F618E206B1E2A
    07/10 21:57:33 [4188] <CalcAgentHashKey>:UC=5AEE5DC40AE206AE014D9F9F6717E8630AdministratorLocalComputerhbsep11pochbctxdom.com
    07/10 21:57:33 [4188] <CalcAgentHashKey>:UCKey=1F1CD88C034A0E7AE90AE0CD0A98DDFF
    07/10 21:57:33 [4188] <DoHeartbeat>HardwareID=5A146C8DCD9904840E934D06C7433D5C
    07/10 21:57:33 [4188] <DoHeartbeat>CHKey=19AD0AA9694E2F43266CDF7F839C688B
    07/10 21:57:33 [4188] <DoHeartbeat>CKey=D2720C16A868E874343B810E7AA9CD94
    07/10 21:57:33 [4188] <DoHeartbeat>UCHKey=8CA6728FD0CCE3E7B79F618E206B1E2A
    07/10 21:57:33 [4188] <DoHeartbeat>UCKey=1F1CD88C034A0E7AE90AE0CD0A98DDFF
    07/10 21:57:33 [4188] <DoHeartbeat> Set heartbeat event
    07/10 21:57:33 [4188] Use new configuration
    07/10 21:57:33 [4188] <CSyLink::IndexHeartbeatProc()>
    07/10 21:57:33 [4188] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 01D28008
    07/10 21:57:33 [4188] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 21:57:33 ======
    07/10 21:57:34 [4188] HEARTBEAT: Check Point 1
    07/10 21:57:34 [4188] Get First Server!
    07/10 21:57:34 [4188] HEARTBEAT: Check Point 2
    07/10 21:57:34 [4188] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    07/10 21:57:34 [4188] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    07/10 21:57:34 [4188] HEARTBEAT: Check Point 3
    07/10 21:57:34 [4188] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
    07/10 21:57:34 [4188] HEARTBEAT: Check Point 4
    07/10 21:57:34 [4188] <IndexHeartbeatProc>===Get Index STAGE===
    07/10 21:57:34 [4188] ************CSN=2421
    07/10 21:57:34 [4188] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=7BC113D80AE206AE012CE574D420A646&chk=19AD0AA9694E2F43266CDF7F839C688B&ck=D2720C16A868E874343B810E7AA9CD94&uchk=8CA6728FD0CCE3E7B79F618E206B1E2A&uck=1F1CD88C034A0E7AE90AE0CD0A98DDFF&hid=5A146C8DCD9904840E934D06C7433D5C&groupid=5AEE5DC40AE206AE014D9F9F6717E863&mode=0&hbt=3600&as=2421&cn=[hex]68627365703131706F63&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    07/10 21:57:34 [4188] <GetIndexFileRequest:>http://10.226.6.175:80/secars/secars.dll?h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
    07/10 21:57:34 [4188] 21:57:34=>Send HTTP REQUEST
    07/10 21:57:34 [4188] 21:57:34=>HTTP REQUEST sent
    07/10 21:57:34 [4188] <GetIndexFileRequest:>SMS return=403
    07/10 21:57:34 [4188] <ParseHTTPStatusCode:>403=>403 Forbidden
    07/10 21:57:34 [4188] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
    07/10 21:57:34 [4188] <GetIndexFileRequest:>COMPLETED
    07/10 21:57:34 [4188] <IndexHeartbeatProc>GetIndexFile handling status: 403
    07/10 21:57:34 [4188] <IndexHeartbeatProc>Switch Server flag=1
    07/10 21:57:34 [4188] HEARTBEAT: Check Point 5.1
    07/10 21:57:34 [4188] <ScheduleNextUpdate>new scheduled heartbeat=1024 seconds
    07/10 21:57:34 [4188] HEARTBEAT: Check Point 8
    07/10 21:57:34 [4188] Get Next Server!
    07/10 21:57:34 [4188] <IndexHeartbeatProc>switch to another server
    07/10 21:57:34 [4188] <DecrementScheduleTime:>New scheduled heartbeat=512 seconds
    07/10 21:57:34 [4188] HEARTBEAT: Check Point 1
    07/10 21:57:34 [4188] HEARTBEAT: Check Point 2
    07/10 21:57:34 [4188] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    07/10 21:57:34 [4188] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    07/10 21:57:34 [4188] HEARTBEAT: Check Point 3
    07/10 21:57:34 [4188] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
    07/10 21:57:34 [4188] HEARTBEAT: Check Point 4
    07/10 21:57:34 [4188] <IndexHeartbeatProc>===Get Index STAGE===
    07/10 21:57:34 [4188] ************CSN=2422
    07/10 21:57:34 [4188] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=7BC113D80AE206AE012CE574D420A646&chk=19AD0AA9694E2F43266CDF7F839C688B&ck=D2720C16A868E874343B810E7AA9CD94&uchk=8CA6728FD0CCE3E7B79F618E206B1E2A&uck=1F1CD88C034A0E7AE90AE0CD0A98DDFF&hid=5A146C8DCD9904840E934D06C7433D5C&groupid=5AEE5DC40AE206AE014D9F9F6717E863&mode=0&hbt=3600&as=2422&cn=[hex]68627365703131706F63&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    07/10 21:57:34 [4188] <GetIndexFileRequest:>http://10.226.6.174:80/secars/secars.dll?h=4C50115CF56E1C0EC68175DF948481AD5C0D40F3E43818664196A6CB09E3F295229CB7D7E266EBC7CD299852FD45D4C526BAAD6AAD7A1590ABA7F807CE463C7846FBA706B85D93CD7D27138417DDAB762BCEC101E48DDE4914E8B4E7B64EF57A28E785A5ECB732F2019BF1EC6D9A7A19A41AD80A59203C909149B6A509C2D8867365E66A25D92F81F8D0625D00A96C5EB300CA07A5D65A542BB851CBD8278D4A9594B967BD92CCED69A3CFD09FD5CED631D487B3482653CF1BE6A0AA1F82E8C3FBE284E5AED88B637A17D1DD0FE7EC79D2309A5A048AD232E259AE0898B52B644817CD27FF149C75685029786F7EAE83B2F3F5A629F86071B7ADF4EF9091170F3C0CCEACEFEC0C837DA9096C97A024DAB45EFCC1B617F42ADD15A9D4C92A0A3A4CEF3A0E87AC8DAFBA8F7DB626E85068AD6E288A90C1CC6E121FD4C71425A47ED21CDE05F080DF83D6FF9B07B9AEB0088F525CD9670277A19BC10C31F3A717D3141F709B1FE04F1B6927B4EA82307C9480B3C4DBF0110F53DF3EEBED72981407653D9F1BED5A6009206161A34C4360847A58ACE6F09E102007EE9FB59DC1FF9A
    07/10 21:57:34 [4188] 21:57:34=>Send HTTP REQUEST
    07/10 21:57:35 [4188] 21:57:35=>HTTP REQUEST sent
    07/10 21:57:35 [4188] <GetIndexFileRequest:>SMS return=200
    07/10 21:57:35 [4188] <ParseHTTPStatusCode:>200=>200 OK
    07/10 21:57:35 [4188] <FindHeader>Sem-HashKey:=>19AD0AA9694E2F43266CDF7F839C688B
    07/10 21:57:35 [4188] <FindHeader>Sem-LANSensor:=>0
    07/10 21:57:35 [4188] <FindHeader>Sem-Signatue:=>A59FA6AE4D9D9BB06AE8CD953476EA9BB0FFD262DB8898B50BBD91FF9EA0D6EDEDB4F5DD2EFED42EE7E68CD5D501B4DECAABBA349AD01522081E85661678053D6AEE976F75D9B98A668B44C8788878A9FFD89739BA544E7FF01797AD863EA22E4AA7B45EE9B0568FF0AF1EFDE602F462174052801619EF6EFD27E4A724D34B1C
    07/10 21:57:35 [4188] <mfn_DoGetIndexFile200>Content Lenght => 1368
    07/10 21:57:35 [4188] <mfn_DoGetIndexFile200>Signature verification FAILED for Index File Content..
    07/10 21:57:35 [4188] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
    07/10 21:57:35 [4188] <GetIndexFileRequest:>COMPLETED
    07/10 21:57:35 [4188] <IndexHeartbeatProc>GetIndexFile handling status: 101
    07/10 21:57:35 [4188] <IndexHeartbeatProc>Switch Server flag=0
    07/10 21:57:35 [4188] HEARTBEAT: Check Point 5.1
    07/10 21:57:35 [4188] <ScheduleNextUpdate>new scheduled heartbeat=1024 seconds
    07/10 21:57:35 [4188] HEARTBEAT: Check Point 8
    07/10 21:57:35 [4188] Get Next Server!
    07/10 21:57:35 [4188] <IndexHeartbeatProc>switch to another server
    07/10 21:57:35 [4188] <DecrementScheduleTime:>New scheduled heartbeat=512 seconds
    07/10 21:57:35 [4188] HEARTBEAT: Check Point 1
    07/10 21:57:35 [4188] HEARTBEAT: Check Point 2
    07/10 21:57:35 [4188] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    07/10 21:57:35 [4188] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    07/10 21:57:35 [4188] HEARTBEAT: Check Point 3
    07/10 21:57:35 [4188] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
    07/10 21:57:35 [4188] HEARTBEAT: Check Point 4
    07/10 21:57:35 [4188] <IndexHeartbeatProc>===Get Index STAGE===
    07/10 21:57:35 [4188] ************CSN=2423
    07/10 21:57:35 [4188] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=7BC113D80AE206AE012CE574D420A646&chk=19AD0AA9694E2F43266CDF7F839C688B&ck=D2720C16A868E874343B810E7AA9CD94&uchk=8CA6728FD0CCE3E7B79F618E206B1E2A&uck=1F1CD88C034A0E7AE90AE0CD0A98DDFF&hid=5A146C8DCD9904840E934D06C7433D5C&groupid=5AEE5DC40AE206AE014D9F9F6717E863&mode=0&hbt=3600&as=2423&cn=[hex]68627365703131706F63&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    07/10 21:57:35 [4188] <GetIndexFileRequest:>http://10.225.6.118:80/secars/secars.dll?h=4C50115CF56E1C0EC68175DF948481AD5C0D40F3E43818664196A6CB09E3F295229CB7D7E266EBC7CD299852FD45D4C526BAAD6AAD7A1590ABA7F807CE463C7846FBA706B85D93CD7D27138417DDAB762BCEC101E48DDE4914E8B4E7B64EF57A28E785A5ECB732F2019BF1EC6D9A7A19A41AD80A59203C909149B6A509C2D8867365E66A25D92F81F8D0625D00A96C5EB300CA07A5D65A542BB851CBD8278D4A9594B967BD92CCED69A3CFD09FD5CED631D487B3482653CF1BE6A0AA1F82E8C3FBE284E5AED88B637A17D1DD0FE7EC79D2309A5A048AD232E259AE0898B52B644817CD27FF149C75685029786F7EAE83B2F3F5A629F86071B7ADF4EF9091170F3C0CCEACEFEC0C837DA9096C97A024DAB45EFCC1B617F42ADD15A9D4C92A0A3A4CEF3A0E87AC8DAFBA8F7DB626E85068C35BE3BCA3DEC3BA4F23E3530F8052C5D21CDE05F080DF83D6FF9B07B9AEB0088F525CD9670277A19BC10C31F3A717D3141F709B1FE04F1B6927B4EA82307C9480B3C4DBF0110F53DF3EEBED72981407653D9F1BED5A6009206161A34C4360847A58ACE6F09E102007EE9FB59DC1FF9A
    07/10 21:57:35 [4188] 21:57:35=>Send HTTP REQUEST
    07/10 21:57:35 [4188] 21:57:35=>HTTP REQUEST sent
    07/10 21:57:35 [4188] <GetIndexFileRequest:>SMS return=404
    07/10 21:57:35 [4188] <ParseHTTPStatusCode:>404=>404 Not Found
    07/10 21:57:35 [4188] HTTP returns status code=404
    07/10 21:57:35 [4188] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
    07/10 21:57:35 [4188] <GetIndexFileRequest:>COMPLETED
    07/10 21:57:35 [4188] <IndexHeartbeatProc>GetIndexFile handling status: 404
    07/10 21:57:35 [4188] <IndexHeartbeatProc>Switch Server flag=1
    07/10 21:57:35 [4188] HEARTBEAT: Check Point 5.1
    07/10 21:57:35 [4188] <ScheduleNextUpdate>new scheduled heartbeat=1024 seconds
    07/10 21:57:35 [4188] HEARTBEAT: Check Point 8
    07/10 21:57:35 [4188] Get Next Server!
    07/10 21:57:35 [4188] <IndexHeartbeatProc>switch to another server
    07/10 21:57:35 [4188] <DecrementScheduleTime:>New scheduled heartbeat=512 seconds
    07/10 21:57:36 [4188] HEARTBEAT: Check Point 1
    07/10 21:57:36 [4188] HEARTBEAT: Check Point 2
    07/10 21:57:36 [4188] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    07/10 21:57:36 [4188] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    07/10 21:57:36 [4188] HEARTBEAT: Check Point 3
    07/10 21:57:36 [4188] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
    07/10 21:57:36 [4188] HEARTBEAT: Check Point 4
    07/10 21:57:36 [4188] <IndexHeartbeatProc>===Get Index STAGE===
    07/10 21:57:36 [4188] ************CSN=2424
    07/10 21:57:36 [4188] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=7BC113D80AE206AE012CE574D420A646&chk=19AD0AA9694E2F43266CDF7F839C688B&ck=D2720C16A868E874343B810E7AA9CD94&uchk=8CA6728FD0CCE3E7B79F618E206B1E2A&uck=1F1CD88C034A0E7AE90AE0CD0A98DDFF&hid=5A146C8DCD9904840E934D06C7433D5C&groupid=5AEE5DC40AE206AE014D9F9F6717E863&mode=0&hbt=3600&as=2424&cn=[hex]68627365703131706F63&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    07/10 21:57:36 [4188] <GetIndexFileRequest:>http://10.225.6.119:80/secars/secars.dll?h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
    07/10 21:57:36 [4188] 21:57:36=>Send HTTP REQUEST
    07/10 21:57:36 [4188] 21:57:36=>HTTP REQUEST sent
    07/10 21:57:36 [4188] <GetIndexFileRequest:>SMS return=404
    07/10 21:57:36 [4188] <ParseHTTPStatusCode:>404=>404 Not Found
    07/10 21:57:36 [4188] HTTP returns status code=404
    07/10 21:57:36 [4188] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
    07/10 21:57:36 [4188] <GetIndexFileRequest:>COMPLETED
    07/10 21:57:36 [4188] <IndexHeartbeatProc>GetIndexFile handling status: 404
    07/10 21:57:36 [4188] <IndexHeartbeatProc>Switch Server flag=1
    07/10 21:57:36 [4188] HEARTBEAT: Check Point 5.1
    07/10 21:57:36 [4188] <ScheduleNextUpdate>new scheduled heartbeat=1024 seconds
    07/10 21:57:36 [4188] HEARTBEAT: Check Point 8
    07/10 21:57:36 [4188] Get Next Server!
    07/10 21:57:36 [4188] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    07/10 21:57:36 [4188] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    07/10 21:57:36 [4188] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 21:57:36 ======
    07/10 21:57:36 [4188] <IndexHeartbeatProc>Set Heartbeat Result= 1
    07/10 21:57:36 [4188] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 1, 'Using Backup Sylink' = 1, 'Using Location Config' = 0
    07/10 21:57:36 [4188] <IndexHeartbeatProc>Connection Failed! No. of tries = 2
    07/10 21:57:36 [4188] Use new configuration
    07/10 21:57:36 [4188] HEARTBEAT: Check Point Complete
    07/10 21:57:36 [4188] <IndexHeartbeatProc>Done, Heartbeat=1024seconds
    07/10 21:57:36 [4188] </CSyLink::IndexHeartbeatProc()>
    07/10 21:57:36 [4188] <CheckHeartbeatTimer>====== Heartbeat loop stops at 21:57:36 ======


  • 10.  RE: SEP client shows offline and shows online in SEPM console.

    Broadcom Employee
    Posted Jul 13, 2009 10:45 AM

    for the server http://10.226.6.175:80/ it shows 403 error. This is mostly seen when you have permission issue on the IIS.

    GetIndexFileRequest:>http://10.226.6.175:80/secars/secars.dll?
    07/10 21:57:34 [4188] <GetIndexFileRequest:>SMS return=403

    for the server http://10.226.6.174:80/ it has connected however we see an signature verification failed.

    07/10 21:57:34 [4188] <GetIndexFileRequest:>http://10.226.6.174:80/secars/secars.dll?h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
    07/10 21:57:34 [4188] 21:57:34=>Send HTTP REQUEST
    07/10 21:57:35 [4188] 21:57:35=>HTTP REQUEST sent
    07/10 21:57:35 [4188] <GetIndexFileRequest:>SMS return=200
    07/10 21:57:35 [4188] <ParseHTTPStatusCode:>200=>200 OK
    07/10 21:57:35 [4188] <FindHeader>Sem-HashKey:=>19AD0AA9694E2F43266CDF7F839C688B
    07/10 21:57:35 [4188] <FindHeader>Sem-LANSensor:=>0
    07/10 21:57:35 [4188] <FindHeader>Sem-Signatue:=>A59FA6AE4D9D9BB06AE8CD953476EA9BB0FFD262DB8898B50BBD91FF9EA0D6EDEDB4F5DD2EFED42EE7E68CD5D501B4DECAABBA349AD01522081E85661678053D6AEE976F75D9B98A668B44C8788878A9FFD89739BA544E7FF01797AD863EA22E4AA7B45EE9B0568FF0AF1EFDE602F462174052801619EF6EFD27E4A724D34B1C
    07/10 21:57:35 [4188] <mfn_DoGetIndexFile200>Content Lenght => 1368
    07/10 21:57:35 [4188] <mfn_DoGetIndexFile200>Signature verification FAILED for Index File Content..


    for the servers http://10.225.6.119:80 and http://10.225.6.118:80 the error is 404, verify the servers are running on these ports .

    The requested file has been renamed.
    The requested file has been moved to another location and/or deleted.
    The requested file is temporarily unavailable due to maintenance, upgrades, or other unknown causes.

    You can verify connect to the server which has message 200 by following the steps mentioned in the Symantec URL
    http://service1.symantec.com/support/ent-security.nsf/docid/2007111311223900

    good luck
    Pete


     



  • 11.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 16, 2009 01:54 PM
    Dear Pete,

    thnx for ur reply can u please help to understbad y there is Signature verification FAILED for Index File Content.....

    Thnx



  • 12.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 16, 2009 02:03 PM
    also help me to understabd which files has been moved or deleted from server 118 and 119


  • 13.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 16, 2009 02:19 PM
    pete
    this problenm i am facing only with old package which is exported from MR3 console
    after upgreading SEPM to MR4 MP2 till 1 minth evrything was works fine....


  • 14.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 17, 2009 06:16 AM
    Question/Issue:
    Symantec Endpoint Protection clients are not able to receive virus definitions or policy information from Symantec Endpoint Protection Manager after a re-installation.



    Symptoms:
    The Symantec Endpoint Protection agent is not able to communicate with Symantec Endpoint Protection server. After running sylinkwatcher.exe you find <GetIndexFileRequest:>SMS return=200, and error "Signature verification FAILED for Index File Content"



    Cause:
    The folders in C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\outbox\agent on the old Symantec Endpoint Protection Manager server are associated with the clients in the previous installation and only work with old clients. New folders are created during re-installation of Symantec Endpoint Protection manager server using the same path as the older installation and will not allow authentication of old clients.




    Solution:
    To correct this issue, follow the below steps:

    Open Symantec Endpoint Protection Manager console
    Click Clients
    Right-click on the group where the problem clients are located
    Delete the client that is not getting updates.

    The client will now show in the Symantec Endpoint Protection Manager on the next hearthbeat and start updating again.

    Alternatively you can go to the client and force a check in.

    Open the client interface from the client
    Click Help and Support> Troubleshooting> Update.


  • 15.  RE: SEP client shows offline and shows online in SEPM console.

    Broadcom Employee
    Posted Jul 17, 2009 06:54 AM
    the site itself would be moved to someother port...since this is communicating on port 80 as per the sy;link, verify if these servers are running on same port....


    good luck
    Pete


  • 16.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 19, 2009 11:51 AM
    Dear Vikram,

    We are not facing problenm with old installed clinet we are facing this issue wt new installetion on which we naver installed SEP.
    We are using old package which is exported form SEP MR3 console...........

    Thnx for ur reply.




  • 17.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 19, 2009 11:53 AM
    In that case you can just go ahed and create new package..
    Did you delete the MR3 package from inside the SEPM ? If no then you can export MR3 packages as well or directly export the MR4MP2 package and deploy it. 


  • 18.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 19, 2009 12:17 PM

    I guess your problem is the same what I encountered, you are experiencing a client communcation issue, to resolve this this link below might be helpful.

    http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/16638b5449556ae3882574c200793618?OpenDocument



  • 19.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 22, 2009 08:46 AM
    this all KB is followed by me and also by support by taking webex sevra; times.................no help..........


    Thnx for reply.......
    hemang


  • 20.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 22, 2009 10:18 AM
    try to use sylinkremote tool from symantec to push the sylink.xml to recommunicate the SEP clients to SEPM server, I believe that you are experiencing a communication issue, it was happened to me before.


  • 21.  RE: SEP client shows offline and shows online in SEPM console.

    Broadcom Employee
    Posted Jul 22, 2009 01:52 PM
    hi hemu,

    well in that case, with the new package exported from SEPM and installed on client makes client show online? if yes, the best way moving forward is to to do that, the reason is SEP MR 4 MP 2 has fixes to issues to seen in MR 3 and other older version.

    In coming days you might upgrade them to MR 4 MP2 or MR 5, hence it would make sense to upgrade now.

    Please keep us posted on the issue if you get to know the reason.

    Cheers
    Pete


  • 22.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 22, 2009 02:11 PM
     I think you are right Peter, it sounds like the same issues I have had before where the wrong package was pushed,


  • 23.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 24, 2009 07:19 AM
    Package is not wrong it is beeing installed from last 9 months and 25k Clinets are working fine after upgreading MR 4 MP 2 also worke fine for 2 month all off sudden it started happning and new package working fine..............But new packag is not the solution please help me to understand SEP................


  • 24.  RE: SEP client shows offline and shows online in SEPM console.

    Broadcom Employee
    Posted Jul 24, 2009 09:20 AM
    then I assume there will change in configuration in SEPM.


  • 25.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 24, 2009 09:25 AM
    Hemu,

    If you are using an old package on a new server then you will not have any success until you do the following:

    1. Get the Sylinkreplacer.exe and follow these directions http://service1.symantec.com/SUPPORT/ent-security.nsf/2326c6a13572aeb788257363002b62aa/4da4661132a851f188257472006adc86?OpenDocument

    This will allow you to replace the xml certificate which provides client authentication. Because you are using an old package on a new server, the certificate will have changed and so the new one must be pushed out to the clients.

    2. Guarantee network connectivity from one of the client machines to the server by running a ping test.

    3. Issue an update commend from the console.

    4. in the CLI, run an active netstat to watch for a connection from the server to be established. 

    5. Go back to the SEPM Console and wait 5-15 minutes. If the command executes successfully, then good, if not, we have a network or NTFS issue.


  • 26.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 24, 2009 11:16 AM
    Check the IIS performance, and the bandwidth alloted to the server and to your network, I thing you are experiencing a network issue as mine.


  • 27.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 26, 2009 03:34 AM
    Dear profman

    If sylink.xml is the issue y erything goes fine till month after upgreading MR3 console to MR4 MP2..........


    Dear Peterpan

    Network is not the issue.......... Please talk on topic new packag is working fine.......





  • 28.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 26, 2009 09:24 PM
    Hi Hemu,

    Did you ever do an Uninstall & reinstall of the SEPM & then restored the Database??????

    Plese let me know?


  • 29.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Jul 28, 2009 03:52 AM
    Yes symantec support has done with dis also no sucess............



  • 30.  RE: SEP client shows offline and shows online in SEPM console.
    Best Answer

    Posted Aug 19, 2009 08:38 AM
    problem is solved after shringkling database..............client started cuming online............


  • 31.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Aug 19, 2009 03:54 PM

    I have a SEPM server, v.11.4202.75,  that is synced with my AD domain.  On this particular SEPM  I have 375 client servers being managed.  I have noticed that I am getting alerts to old virus definitions, or a lenghty amount of time since a client has checked-in. 

    However, whenever I log directly into these clients and pull up their client consoles, I can verify that they are indeed checking-in, and have current virus signatures.  I am not using any additional SEPMs for load balancing or anything of that nature.

    I have tried rebooting the server thinking that maybe the built-in database is not updating with the client information but this does not seem to be the case. 

    Any suggestions would be greatly appreciated.

    SESB - Saufley



  • 32.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Aug 19, 2009 11:21 PM
    are using embeded database or MS SQL 2005........?


  • 33.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Aug 20, 2009 09:49 AM
    Hi every one, i've experienced that too... Online status on the client side, but when you check in the console it is offline.. and vice versa.... i'm using an embeded database...


  • 34.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Aug 20, 2009 09:55 AM
    try to use dbunload of ur issue is similar


  • 35.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Aug 30, 2009 07:54 AM
    hiiiiii again m/c started going offline................even shrink DB dont no wt is going wrong..........


  • 36.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Aug 30, 2009 11:42 AM
    ok, will try..thanks...


  • 37.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Aug 31, 2009 04:42 AM
    I suggest that you check the ports in the management server list. They were changed after an upgrade of SEPM.


  • 38.  RE: SEP client shows offline and shows online in SEPM console.

    Posted Feb 04, 2010 03:53 PM
    i am having a similar issue where i have just recently moved my SEP manager from the C: to the F: (C: was running low on diskspace);  I did a backup of the database, uninstall SEP and reinstall on F:; setup the database; restore the database; and now my clients are having issues with communicating with the server.  Server shows client is up but client shows server as being offline; I have exhausted all the test that I was able to find on the forum (sylink, ping, telnet, secars, IIS settings).  Can anyone help?  Thanks


  • 39.  RE: SEP client shows offline and shows online in SEPM console.

    Posted May 14, 2010 03:24 AM
      Solution for SEP updation through the SEPM server. 
     
     
    Problem :- If SEP cleient is not taking update(Not showing green Dot and showing offline), Even it's able to ping the server also able to telnet the server.
     
    resolution :-
     
    1. Try to telnet the server on port 8014 (which you already given for client to server communication).
    2. If you are able to telnet than export the sylink file from that group in which you want to communicate with your client. and try to replace the Sylink file on the client.
     
    If both of the upper taks are working fine than just try to do the 
     
       Just go through the below mention link to check the communication from client to server is working properly or not :-
     
     
    Just copy and paste that link into your browser and see there should be a OK massage on the browser.
     
    Note : Just replace the SEPM-SERVER into your server name or IP Address. For example :-
     
    If you got the OK msg it means communication with the SEPM server is ok.
     
    Now try to collect the logs. in the logs you will get the exact error where is the problem exists. follow the below mention activity for collecting the logs :-
     
    https://fileshare.symantec.com/, and use the following login ID and password.
     
    Login ID: sytoggle
    Password: SyTo66l3!
    Download SyToggle.zip
     
    Once you have downloaded the utility, please follow these instructions.
    Note: The zip file is password protected.
    Un-Zip Password: symantec
    1. Extract the file to a new folder to a convenient location, such as the Desktop, using the un-zip password provided above.
    2. Before continuing, please remember to export the Registry to create a backup!
    3. Execute the tool by double clicking 'SyToggleON.exe'.
    4. SyToggleON will create a Sylink.log file at C:\. Open the log file to view detailed information about the logged results.
    5. To disable the SyLinkToggle utility execute the SyToggleOFF.exe utility. The log files will be written until this step is completed.
    After completing the process please collect the file(Sylink.log from C drive) 
     
    Chk the log file and see the error:-
    Please refer the below document.
     
    Also check that, If you are using any proxy server. than try to uncheck the proxy settings than try to update the policy.
     
    If still you are having any problem than follow the Symantec artical :-
     
    Take full backup of registry. 
    Search and delete all the instances of SavedLegacySettings and DefaultConnectionSettings from registry.
    Restart the machine and check.. IT SHOULD BE SHOWING ONLINE.. wink