Endpoint Protection

 View Only
Expand all | Collapse all

SEP Console where all clients show offline

Migration User

Migration UserJan 10, 2015 05:22 AM

Migration User

Migration UserJan 10, 2015 06:52 AM

Migration User

Migration UserJan 10, 2015 07:56 AM

ℬrίαη

ℬrίαηJan 10, 2015 04:12 PM

Migration User

Migration UserJan 12, 2015 06:03 AM

Ramji Iyyer

Ramji IyyerApr 28, 2015 07:04 AM

  • 1.  SEP Console where all clients show offline

    Posted Jan 10, 2015 04:42 AM

    SEP Version 12.1 RU5

    10000 Clients

    Windows Server 2008 r2, Sql 2008 Database

    Issue with SEP Console where all clients show offline and start coming back online after some time... tested clients and it appears that this is server related.

    Looked at the Event Viewer and found the following issue.

    Faulting application name: httpd.exe, version: 2.2.21.5, time stamp: 0x4e7aa075
    Faulting module name: mod_isapi.so, version: 2.2.21.5, time stamp: 0x4e7aa099
    Exception code: 0xc00000fd
    Fault offset: 0x00003427
    Faulting process id: 0x20cc
    Faulting application start time: 0x01cd63755cb8f18c
    Faulting application path: D:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\apache\bin\httpd.exe
    Faulting module path: D:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\apache\modules\mod_isapi.so
    Report Id: 1628a3b2-d040-11e1-8797-005056a342b9



  • 2.  RE: SEP Console where all clients show offline

    Posted Jan 10, 2015 04:43 AM

    Have you restart SEPM service ?

    How much disk space available in server ?



  • 3.  RE: SEP Console where all clients show offline

    Posted Jan 10, 2015 04:46 AM
    They would come back after sometime? Sort of temporary issue?


  • 4.  RE: SEP Console where all clients show offline

    Posted Jan 10, 2015 04:48 AM

    Yes Restarted but still same issue

    297 GB is free disk sapce

     

    but no luck still same events showing and clienst are going OFFLINE ..

     

    Faulting application name: httpd.exe, version: 2.4.6.153, time stamp: 0x539e89a7
    Faulting module name: libaprutil-1.dll, version: 1.5.2.153, time stamp: 0x539e8a5b
    Exception code: 0xc0000005
    Fault offset: 0x00001019
    Faulting process id: 0x25f4
    Faulting application start time: 0x01d02cac6ba00be1
    Faulting application path: D:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\apache\bin\httpd.exe
    Faulting module path: D:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\apache\bin\libaprutil-1.dll
    Report Id: d075c4e0-98a1-11e4-9519-00505684006b



  • 5.  RE: SEP Console where all clients show offline

    Posted Jan 10, 2015 04:56 AM

    Yes clients will start reporting back after few seconds and afetr few hrs again same issue.

     

    free disk sapce is 297 GB



  • 6.  RE: SEP Console where all clients show offline

    Posted Jan 10, 2015 05:02 AM
    Enable finest debugging and post scm-server0 log


  • 7.  RE: SEP Console where all clients show offline

    Posted Jan 10, 2015 05:22 AM
      |   view attached

    attached SCM-SERVER0 log

    Attachment(s)

    zip
    scm-server-0_50.zip   464 KB 1 version


  • 8.  RE: SEP Console where all clients show offline

    Posted Jan 10, 2015 06:52 AM

    please help me to resolve this issue



  • 9.  RE: SEP Console where all clients show offline



  • 10.  RE: SEP Console where all clients show offline

    Posted Jan 10, 2015 07:56 AM

    no luck after performing this activities.



  • 11.  RE: SEP Console where all clients show offline

    Posted Jan 10, 2015 08:14 AM

    Run the symhelp tool on the sepm as well:

    http://www.symantec.com/docs/TECH170752



  • 12.  RE: SEP Console where all clients show offline

    Posted Jan 10, 2015 08:16 AM

    Have you repair SEPM ?

    Currently all client are offline or online ? Database services are runinng started or not ?

    as per log find below error

    com.sygate.scm.common.communicate.CommunicationException: Failed to connect to the server.

    Make sure that the server is running and your session has not timed out.
    If you can reach the server but cannot log on, make sure that you provided the correct parameters.
    If you are experiencing network issues, contact your system administrator. ErrorCode: 0x80020000

    See this http://www.symantec.com/business/support/index?page=content&id=TECH140619

    If above repair and articles not working you can perform disaster recovery process

    Disaster recovery best practices for Symantec Endpoint Protection 12.1

    Article:TECH160736  | Created: 2011-05-24  | Updated: 2014-12-01  | Article URL http://www.symantec.com/docs/TECH160736

     



  • 13.  RE: SEP Console where all clients show offline

    Posted Jan 10, 2015 02:37 PM

    pls help me to claim my order last november 19 the PC CLEAN UP...this is my firat time to  purchase and renew my norton security

     



  • 14.  RE: SEP Console where all clients show offline

    Posted Jan 10, 2015 04:12 PM
    You'll need to contact Norton for this.


  • 15.  RE: SEP Console where all clients show offline

    Posted Jan 12, 2015 06:03 AM
      |   view attached

    Attaching symhelp.

    Attachment(s)

    rar
    2015-01-12__15-51-18.rar   29.96 MB 1 version


  • 16.  RE: SEP Console where all clients show offline

    Posted Jan 12, 2015 06:40 AM

    Cound not find anything relevant from scm-server0.log  as this is a intermittent issue, 

    I would like you to configure the Server Access Log in Apache, then post it when the issue acutally happens, we can sort it by time and see why they wont talk to SEPM



  • 17.  RE: SEP Console where all clients show offline

    Posted Mar 25, 2015 12:25 AM

    We are also facing same issue in our environment.

    Faulting application name: httpd.exe, version: 2.4.6.153, time stamp: 0x539e89a7
    Faulting module name: libaprutil-1.dll, version: 1.5.2.153, time stamp: 0x539e8a5b
    Exception code: 0xc0000005
    Fault offset: 0x00001014
    Faulting process id: 0x2814
    Faulting application start time: 0x01d066affc823a72
    Faulting application path: D:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\apache\bin\httpd.exe
    Faulting module path: D:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\apache\bin\libaprutil-1.dll
    Report Id: f6f0eeca-d2a5-11e4-80f4-f0921c000db4
    Faulting package full name: 
    Faulting package-relative application ID: 

    SEPM - 12.1.5

    SQL Database.



  • 18.  RE: SEP Console where all clients show offline

    Posted Apr 16, 2015 10:20 AM

    Open a case wth Symantec Support. The issue is fixed in SEPM RU6

    Kindly find the below details..

    Apache process crashes, clients reporting offline after SEPM upgrade

    FIX ID: 3680595, 3682969, 3721675 

    Symptom: In environments with large numbers of content definition downloads, httpd.exe crashes.

    Solution: Fixed the logic in the high-performance file download routines for Symantec Endpoint Protection Manager’s httpd.exe implementation.

    Note:- Symantec Technical Engineer will provide workaround



  • 19.  RE: SEP Console where all clients show offline

    Posted Apr 16, 2015 12:37 PM

    Hi Ramji,

     

    Could you pls share us the workaround for the above issue.

     



  • 20.  RE: SEP Console where all clients show offline

    Posted Apr 17, 2015 03:57 AM

    Hi Kannan,

     

    Sorry !!! i am still waiting from Symantec Dev team.

     

     



  • 21.  RE: SEP Console where all clients show offline

    Posted Apr 28, 2015 07:04 AM

    Hi Kannan,

     

    Any updates on your support case.

     

     



  • 22.  RE: SEP Console where all clients show offline

    Posted Apr 30, 2015 05:21 AM
      |   view attached

    Hi Kannan,

     

     

    Please find below the steps as suggested by Symantec Support.

    1) Stop SEPM services
     
    2) Go to %SEPM%\Apache\bin
     
    3) Backup following files: libaprutil-1.dll, libapr-1.dll, libhttpd.dll
     
    4) Extract and copy the following files attached to this email to %SEPM%\Apache\bin
     
    libapr-1.dll
    libaprutil-1.dll
    libhttpd.dll
     
    5) Fix the log rotation issue by editing %SEPM%\Apache\conf\httpd.conf file
    Find the following line:
    ErrorLog "|| bin/......
    Replace with:
    ErrorLog "|| bin/rotatelogs.exe -n 2 logs/error.log 100M"
     
    6) Start SEPM service

    Attachment(s)

    zip
    httpd binaries.zip   320 KB 1 version


  • 23.  RE: SEP Console where all clients show offline

    Posted Apr 30, 2015 05:32 PM

    Hi Ramji,

    Thanks for the information Let me check and update you the status.

     

     



  • 24.  RE: SEP Console where all clients show offline

    Posted May 08, 2015 12:32 AM

    Hi Ramji,

    Thanks a lot!!! Fix worked for us.Past 3 days there is no http.exe crash log.

     



  • 25.  RE: SEP Console where all clients show offline

    Posted May 11, 2015 04:58 AM

    Welcome Kannan,

     

    Mark As solution and close the thread.