Endpoint Protection

I am running SEPM 11.0.5002.333 on Windows 2003 x86 Standard edition. As of late whether I use SEPM from my Windows 7 workstation or the server I am constantly kicked out of SEPM. Now this could be right after I log in to 5 minutes later to 30 minutes later. I turned off the timeout, so that should not be an issue at this point. Also I could be doing various tasks or just clicking on a new view when I am kicked out of the console. No errors and nothing to help me figure out what is going wrong. Anyone run into this before?

 I'm having the same issue with  SEPM 11.0.5002.333 on Windows 2003 x86 Standard edition. I walk away and come back and it's logged out. I can't find any settings to disable this.
 

I have followed the article on "symantec endpoint protection manager service stops with a Java -1 error in the event log" and no luck . I did pull this from the scm-server-0.log file.

Reboot the server once and try..
Any other java installed in your SEPM?
If yes remove it and try.
If noting heps adjust the Symantec Endpoint Protection Manager heap size:
Click Start> Run.
In the Run dialog box, type regedit
Press Enter.
Locate the following registry key:
HKLM\SYSTEM\CurrentControlSet\Services\semsrv\Parameters\
Locate the following keys:
JVM Option Number 0
JVM Option Number 1
Adjust the key values upward, and for optimal performance, match the key values.
For example, to create a 1 GB static heap, set: "JVM Option Number 0" to "-Xms512m", and set "JVM Option Number 1" to "-Xmx1024m".
Close Regedit.
Click Start> Settings> Control Panel> Administrative Tools
In the Services dialog box, right-click Symantec Endpoint Protection Manager, and then click Restart.
 

try reconfiguring the management server and see if it fixes the issue.

I did have another version of Java loaded so I uninstalled, and I will see if that makes any difference in SEPM not closing down on me. Thank you for the update.

I did try that to start, but it did not resolve the problem for me. Thank you!

Thank you AravindKM as your suggested solution has fixed my issue as SEPM console has not crashed and it has not stayed open this long since I initially setup the server. Much appreciated!

AravindKM,

I tried your suggestion and it didn't work for me. I still have issues with the SEP Manager logging out back to the log-in screen randomly.
Any other suggestions?

Nothing has changed on the SEPM server and it's back to closing out within seconds of logging in or within a few minutes. Any additional ideas on what could be going wrong? This is extremely aggrevating when you're in the middle of running a report or other function and you get booted out.

Feb 10, 2010 2:54:10 PM org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler processConnection
FINE: IOException reading request
javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLException: java.net.SocketException: Software caused connection abort: socket write error
 at com.sun.net.ssl.internal.ssl.SSLSocketImpl.checkEOF(SSLSocketImpl.java:1255)
 at com.sun.net.ssl.internal.ssl.AppInputStream.available(AppInputStream.java:40)
 at org.apache.tomcat.util.net.TcpConnection.shutdownInput(TcpConnection.java:91)
 at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:679)
 at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:528)
 at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:81)
 at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:689)
 at java.lang.Thread.run(Thread.java:619)
Caused by: javax.net.ssl.SSLException: java.net.SocketException: Software caused connection abort: socket write error
 at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:190)
 at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1611)
 at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1574)
 at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1538)
 at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1483)
 at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:64)
 at org.apache.coyote.http11.InternalOutputBuffer.realWriteBytes(InternalOutputBuffer.java:750)
 at org.apache.tomcat.util.buf.ByteChunk.flushBuffer(ByteChunk.java:432)
 at org.apache.coyote.http11.InternalOutputBuffer.flush(InternalOutputBuffer.java:305)
 at org.apache.coyote.http11.Http11Processor.action(Http11Processor.java:997)
 at org.apache.coyote.Response.action(Response.java:183)
 at org.apache.coyote.tomcat4.OutputBuffer.doFlush(OutputBuffer.java:324)
 at org.apache.coyote.tomcat4.OutputBuffer.flush(OutputBuffer.java:297)
 at org.apache.coyote.tomcat4.CoyoteOutputStream.flush(CoyoteOutputStream.java:74)
 at com.sygate.scm.server.consolemanager.requesthandler.SearchUnagentedHostHandler$1.run(SearchUnagentedHostHandler.java:251)
Caused by: java.net.SocketException: Software caused connection abort: socket write error
 at java.net.SocketOutputStream.socketWrite0(Native Method)
 at java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:92)
 at java.net.SocketOutputStream.write(SocketOutputStream.java:136)
 at com.sun.net.ssl.internal.ssl.OutputRecord.writeBuffer(OutputRecord.java:295)
 at com.sun.net.ssl.internal.ssl.OutputRecord.write(OutputRecord.java:284)
 at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecordInternal(SSLSocketImpl.java:734)
 at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:722)
 at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:59)
 ... 9 more

on the same server try this
http://localhost:9090
Will download a console, log in to that, let me know if thats logs you out.
delete whatever is in temp folder
give full permission to temp folder found in
F:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection Manager\Php\temp
 

if this console on win7
have u tried right click and run as admin, check if that keeps you stayed in? 

Yes, I am instantly logged out when I try to use through this method. I did clear out 300 or some items in that temp folder, and I gave full permissions to local admins, web user, domain admins, and system.

The other thing I just saw was that a Retry message pops up stating the page could not be found? To be exact it states "To Display the webpage again, Internet Explorer needs to resend the information you've previously submitted.? Retry or Cancel

I have done that and I actually turned off UAC on my Windows 7 install. In addition to my previous post that states - The other thing I just saw was that a Retry message pops up stating the page could not be found? To be exact it states "To Display the webpage again, Internet Explorer needs to resend the information you've previously submitted.? Retry or Cancel

if I click cancel and go to say the home page of SEPM it comes back with the webpage has expired.

have enhanced internet security enabled? 

Not sure what enhanced internet security actually is, and are we referring to my workstation or the server?

your station sir,
http://support.microsoft.com/kb/815141 

You are connecting remotely to your server box via a console, (Terminal Server or RDP), correct ?

You can try and run "MSCONFIG" and remove every non-essential application from starting and see if that helps.

And since there is nothing in the "STARTUP" tab that will influence how the server works, should give you a good idea of where to go from there if it crashes or doesn't crash anymore.

Also, you can try to remove JAVA altogether, every instance and install JRE 1.6 (latest build) straight from SUN's website.

Might simply be a problem on that level as well.

Yes, I am using RDP to the console and VNC, and directly on the server via KVM.

I did the msconfig but to no avail after reboot as the crashes/close outs still occur.

Updated Java to the latest.

Should I proceed to tech support for them to review?

In your SEPM remove any Java program installed.(Only symantec endpoint protection manager should be the program related to Java and it will not give any additional entry in add/remove programs..).In Internet Explorer go to tools----->Internet Options----->Temporary Internet files/Browsing History ---->settings----->view objects and remove any program which is present there (Right click and click remove).
Then Go to add/remove windows components and remove Internet Explorer enhanced security features,restart the server,access it via VNC/KVM and try to login to it..

If above suggestion not helps paste/attach the scm-server-0.log with is present in Program Files \Symantec\Symantec Endpoint Protection Manager\tomcat\logs

Still no luck after all of those changes... The entire log you requested has been pasted below.

I disabled DEP on the server by changing the boot.ini and after the reboot I have been in SEPM on the server for 3 hours without it crashing once on me. I'm hoping this is the final resolution....