Endpoint Protection

 View Only

  • 1.  SEP computer status logs shows "status" column as Disable & Enable

    Posted Sep 01, 2015 02:43 PM

    Hi All,

    When I fetch computer status report from SEPM console, I see there in "Status" column as "Disable" or "Enable". 

    What does a "Disable" status means? 1. Does it means the client is not communicating to SEPM, 2. Does it means the sep client is corrupted or defs. are corrupted, 3. Does it mean client machine is shutdown(offline)? or what are the possible reasons for "Disable" status in computer status report.

    Please suggest.



  • 2.  RE: SEP computer status logs shows "status" column as Disable & Enable

    Posted Sep 01, 2015 02:44 PM

    Disable/Enable means that a specific component is either disabled or enabled.

    The computer status report should show exactly which one it is.



  • 3.  RE: SEP computer status logs shows "status" column as Disable & Enable

    Posted Sep 01, 2015 02:53 PM

    Hi Brian,

     

    Thanks for replying.

    In computer status report, you must have seen column name as "Pattern Date", "Client Version", "HI Status", "Last Time Status Changed" & "Status" etc. So, there in "Status" column, we either see "Disable" or "Enable" for a particular sep client. So, I want to know, if , for a clinet log shows as "Disable" then what could be the reasons here?



  • 4.  RE: SEP computer status logs shows "status" column as Disable & Enable

    Posted Sep 01, 2015 03:14 PM

    Looks like it means clients not connected (offline) to the SEPM are considered Disabled.



  • 5.  RE: SEP computer status logs shows "status" column as Disable & Enable

    Posted Sep 01, 2015 03:18 PM

    Any more details you can provide here Brian.



  • 6.  RE: SEP computer status logs shows "status" column as Disable & Enable

    Posted Sep 01, 2015 03:19 PM

    The client is disconnected from the SEPM. You need to troubelshoot as to why. Is the client supposed to be offline? Is the machine turned? Is SEP disabled for some reason?



  • 7.  RE: SEP computer status logs shows "status" column as Disable & Enable
    Best Answer

    Broadcom Employee
    Posted Sep 02, 2015 10:00 AM

    Hi,

    Thank you for posting your query in Symantec community.

    Q. What does a "Disable" status means?

    -->  It means that particular feature is disabled on SEP client.

    1. Does it means the client is not communicating to SEPM,

    --> Not really, as long as green dot is there can assume client is communicating with the SEPM.

    2. Does it means the sep client is corrupted or defs. are corrupted, 3. Does it mean client machine is shutdown(offline)? or what are the possible reasons for "Disable" status in computer status report

    --> Generally it won't happen due to definitions corruption, in that case it may show error like "PTP definitions are malfunctioning"  Mostly disabled means either disabled by policy or by end user. Enabled means feature is up and running.

    Enable.jpg

    Actually you get more precise report when select sub-categories under computer status report.

    status report.jpg

    There isn't any specific document which explain definitions of Enabled/Disabled. However, refer this guide:

    About the different types of Symantec Endpoint Protection Manager Reports

    http://www.symantec.com/docs/TECH95538