Endpoint Protection

We are having a communication issue in our SEP,

scenario:

     I have install my SEP on two PC at the same time, suddenly after few days one of the SEP clients is no longer connected to SEPM, I dont know why, our SEP version is MR4MP2

anyone here with the same problem and how to resolve the issue?

Hi peterpan,

is the client that has lost communication with the server logged in as user mode or normal administrator mode?

yes the communication is lost, and that is my another problem the mode will automatically changed between user and computer. what will I do to resolve this

Can you get the sylink log..You may find the below mention to help you get the logs..

https://www-secure.symantec.com/connect/downloads/sylink-monitor

https://www-secure.symantec.com/connect/articles/troubleshooting-liveupdate-issues

HI I try to replace the sylink but it wont help

Ensure all communication port between client and SEPM is open. The below document will tell u which are the ports required for communication http://service1.symantec.com/SUPPORT/ent-security.nsf/2326c6a13572aeb788257363002b62aa/edda0cd89141a6788025734e004b6a02?OpenDocument

I think the better way to do is to escalate this issue to support, anyway thanks guys

Hi Peterpaan,

after changing the sylink.xml file, update the policy from client and at the same time run the sylinkmonitor. Gather the logs for sometime and paste it here. The logs will help to narrow down the issue.

Hi peter,

i am facing this issue currently with some of my machines, but mine is a bit different one, if the client is logged in as a user then it is not communicating with the server, but if the client is logged in administrator mode then it communicates with the server. I have contacted symantec regarding this, they have suggested a manual unistall of the SEP and then install again with only antivirus and antispyware engines on the client. In my case the issue is solved by the manual uninstall, but the process of manual uninstall is pretty lengthy. you can try it out. You can find the process for manual uninstallation on the following link

service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007073018014248

the pc is just only behind from the other pc as I metioned I install SEP at the same time connected with the same switch port. some kind of a weird scenario, windows firewall is disabled.

hi sapta what is the root cause of your problem?

hi peter
i coudnt figure out the root of the issue, but a week ago our network was very badly affected by on virus named W32.Neeris, i was communicating with symantec regarding this, suddenly after 4 or 5 days i m seeing this issue on some clients.

Hi Peterpan,

Lets start with basics.

Can you ping the server with servername and IP address?
Do you know on which port have you installed SEPM?
Can you telnet to the server on that port? e.g. telnet 10.205.153.25:8014 [ assuming sepm is installed on port 8014]?

If the answer to all the above answers is a yes, then you can do a secars test by etering the following in internet explorer

http://10.0.2.2:8014/secars?hello,secars 

if you see "OK" as the output, then the SEPM is able to accept the connections just fine.

Let us know the results of the above tests mentioned.

Best,
Aniket

Hi Peterpan

Try this