Endpoint Protection

 View Only
  • 1.  SEP12.1 RU4 firewall canot work

    Posted May 21, 2014 03:55 AM

    Sep newly installed computer firewall appears to work properly, turn on debug logging, logging as follows:

     

    2014/05/21 15:25:12.268 [948:5692] Enterprise version, Build 4013!!!
    2014/05/21 15:25:12.268 [948:5692] Command line has been handled
    2014/05/21 15:25:22.824 [3892:4768] Enterprise version, Build 4013!!!
    2014/05/21 15:25:22.824 [3892:4768] CSmcApp::SmcStopService
    2014/05/21 15:25:22.824 [3892:4768] Check the smc service for password-enabled state. 
    2014/05/21 15:25:22.824 [3892:4768] Open the service event. 
    2014/05/21 15:25:22.824 [3892:4768] Initialize a IPC server
    2014/05/21 15:25:22.834 [3892:4768] Setting Get password event
    2014/05/21 15:25:22.834 [4680:5628] ServiceStart::get-password event is signalled.
    2014/05/21 15:25:22.834 [4680:5628] ServiceStart::password protection is disabled
    2014/05/21 15:25:22.834 [4680:5628] SmcNotifyStopServStatus: the exit password protection is disabled.
    2014/05/21 15:25:22.834 [3892:4080] In CStatusSessionIpcHandler::OnSessionUpdateStatus.
    2014/05/21 15:25:22.834 [3892:4080] CStatusSessionIpcHandler::OnSessionUpdateStatus: password protection is enabled.
    2014/05/21 15:25:22.834 [3892:4768] Smc password is disabled.
    2014/05/21 15:25:22.834 [3892:4768] User tried to stop smc service.
    2014/05/21 15:25:22.834 [3892:4768] Smc is stopping service
    2014/05/21 15:25:22.839 [4680:5204] Service : Start Stopping Service
    2014/05/21 15:25:22.839 [4680:5204] Waiting for the service to stop
    2014/05/21 15:25:22.839 [4680:5628] Service is shutting down
    2014/05/21 15:25:22.839 [4680:5628] SmcService: Stopped the thread which trims the working set
    2014/05/21 15:25:22.839 [4680:5628] CProfileMgrManPlugin::ReceiveMessage: enter
    2014/05/21 15:25:22.839 [4680:5628] ProfileMgrMan: ReceiveMessage with msg id 458754
    2014/05/21 15:25:22.839 [4680:5628] CProfileMgrManPlugin::ReceiveMessage: exit
    2014/05/21 15:25:22.839 [4680:5628] AVMan: Entering ReceiveMessage with msg id 458754
    2014/05/21 15:25:22.839 [4680:5628] AVMan: Disabled event forwarding.
    2014/05/21 15:25:22.839 [4680:5628] AVMan: Leaving ReceiveMessage
    2014/05/21 15:25:22.839 [4680:5628] LUMan: Entering ReceiveMessage with id 0x70002
    2014/05/21 15:25:22.839 [4680:5628] LUMan: SMC notified LuMan that it is stopping
    2014/05/21 15:25:22.839 [4680:5628] AtpiMan: Entering ReceiveMessage with msg id 458754
    2014/05/21 15:25:22.839 [4680:5628] AtpiMan: Leaving ReceiveMessage
    2014/05/21 15:25:22.839 [4680:5628] BashMan: Entering ReceiveMessage with msg id 458754
    2014/05/21 15:25:22.839 [4680:5628] BashMan: Leaving ReceiveMessage
    2014/05/21 15:25:22.839 [4680:5628] CidsMan: Entering ReceiveMessage with msg id 458754
    2014/05/21 15:25:22.839 [4680:5628] CidsMan: Leaving ReceiveMessage
    2014/05/21 15:25:22.839 [4680:5628] RebootMgrMan: Entering ReceiveMessage with msg id 458754
    2014/05/21 15:25:22.839 [4680:5628] RebootMgrMan: Leaving ReceiveMessage
    2014/05/21 15:25:22.839 [4680:5628] RepMgtMan: Entering ReceiveMessage with msg id 458754
    2014/05/21 15:25:22.839 [4680:5628] RepMgtMan: Leaving ReceiveMessage
    2014/05/21 15:25:22.839 [4680:5628] SubmissionsMan: Entering ReceiveMessage with msg id 458754
    2014/05/21 15:25:22.839 [4680:5628] SubmissionsMan: Leaving ReceiveMessage
    2014/05/21 15:25:22.839 [4680:4836] HI: HI Engine thread is terminated
    2014/05/21 15:25:22.839 [4680:5628] HI: set HI result to HI_CHECK_DISBALED.
    2014/05/21 15:25:22.839 [4680:5628] Saving SMC State
    2014/05/21 15:25:22.844 [4680:5628] chmod on file C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\State\SerState.dat to read/write.
    2014/05/21 15:25:22.844 [4680:5628] CProfileMgrManPlugin::Enable: enter
    2014/05/21 15:25:22.844 [4680:5628] enable=false
    2014/05/21 15:25:22.844 [4680:5628] CProfileMgrManPlugin::Enable: exit
    2014/05/21 15:25:22.844 [4680:5628] AVMan: Entering Enable -- enable=false
    2014/05/21 15:25:22.844 [4680:5628] AVMan: Disabled event forwarding.
    2014/05/21 15:25:22.844 [4680:5628] GUProxy: Enable called.
    2014/05/21 15:25:22.844 [4680:5628] GUProxy: Enable
    2014/05/21 15:25:22.864 [4680:5628] AtpiMan: Entering Enable -- enable=false
    2014/05/21 15:25:22.864 [4680:5628] BashMan: Entering Enable -- enable=false
    2014/05/21 15:25:22.864 [4680:5628] CidsMan: Entering Enable -- enable=false
    2014/05/21 15:25:22.864 [4680:5628] RebootMgrMan: Entering Enable -- enable=false
    2014/05/21 15:25:22.864 [4680:5628] RepMgtMan: Entering Enable -- enable=false
    2014/05/21 15:25:22.864 [4680:5628] SubmissionsMan: Entering Enable -- enable=false
    2014/05/21 15:25:22.864 [4680:4504] Ending Auto location ThreadID = 4504
    2014/05/21 15:25:22.864 [4680:5628] Stopping SyLink...
    2014/05/21 15:25:22.864 [4680:5628] <SyLink>Stop begin.---->
    2014/05/21 15:25:22.864 [4680:5628] <SyLink>Stopping LU download Thread.
    2014/05/21 15:25:22.864 [4680:4040] [Content]<LUMaintenanceThread:> stopping
    2014/05/21 15:25:22.864 [4680:5628] <SyLink>LU download Thread stopped.
    2014/05/21 15:25:22.864 [4680:5628] <SyLink>Stop Main Thread.
    2014/05/21 15:25:22.864 [4680:4116] <SyLink>***** Main Thread Exit ****
    2014/05/21 15:25:22.864 [4680:5628] <SyLink>Main Thread stopped.
    2014/05/21 15:25:22.864 [4680:5628] <SyLink>Stopping heartbeat Thread.
    2014/05/21 15:25:22.884 [4680:6000] AH: (InetWaiting) urgent exit event.
    2014/05/21 15:25:22.884 [4680:6000] Sylink:(EXCEPTION, err=997) AH: failed to send request...
    2014/05/21 15:25:22.884 [4680:5628] <SyLink>Heartbeat thread stopped, Heartbeat=5
    2014/05/21 15:25:22.884 [4680:5628] <SyLink>Heartbeat Thread stopped.
    2014/05/21 15:25:22.884 [4680:5628] <SyLink>Start Stopping Downloading Thread
    2014/05/21 15:25:22.884 [4680:5628] <SyLink>Downaloding Thread stopped.
    2014/05/21 15:25:22.884 [4680:5628] <SyLink>Save sylink settings.
    2014/05/21 15:25:22.884 [4680:5628] <SyLink><-----Stop completed!
    2014/05/21 15:25:22.884 [4680:5628] Lock held for 16ms
    2014/05/21 15:25:22.884 [4680:5628] Deleting SyLink...
    2014/05/21 15:25:22.884 [4680:5628] <SyLink>Destructor called!
    2014/05/21 15:25:22.884 [4680:5628] <SyLink>Stop begin.---->
    2014/05/21 15:25:22.884 [4680:5628] <SyLink><-----Already stopped.Stop End.
    2014/05/21 15:25:22.884 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\NacManager.plg)
    2014/05/21 15:25:22.884 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\NacManager.plg) done
    2014/05/21 15:25:22.884 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\SubmissionsMan.plg)
    2014/05/21 15:25:22.884 [4680:5628] SubmissionsMan: Entering Terminate
    2014/05/21 15:25:22.889 [4680:5628] CSmcPluginBase::Terminate()
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\SubmissionsMan.plg) done
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\RepMgtMan.plg)
    2014/05/21 15:25:22.889 [4680:5628] RepMgtMan: Entering Terminate
    2014/05/21 15:25:22.889 [4680:5628] RepMgtMan: Leaving Terminate
    2014/05/21 15:25:22.889 [4680:5628] CSmcPluginBase::Terminate()
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\RepMgtMan.plg) done
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\RebootMgrMan.plg)
    2014/05/21 15:25:22.889 [4680:5628] RebootMgrMan: Entering Terminate
    2014/05/21 15:25:22.889 [4680:5628] CSmcPluginBase::Terminate()
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\RebootMgrMan.plg) done
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\CIDSMan.plg)
    2014/05/21 15:25:22.889 [4680:5628] CSmcPluginBase::Terminate()
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\CIDSMan.plg) done
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\BashMan.plg)
    2014/05/21 15:25:22.889 [4680:5628] BashMan: Entering Terminate
    2014/05/21 15:25:22.889 [4680:5628] CSmcPluginBase::Terminate()
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\BashMan.plg) done
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\AtpiMan.plg)
    2014/05/21 15:25:22.889 [4680:5628] AtpiMan: Entering Terminate
    2014/05/21 15:25:22.889 [4680:5628] CSmcPluginBase::Terminate()
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\AtpiMan.plg) done
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\DevMan.plg)
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\DevMan.plg) done
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\SfMan.plg)
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\SfMan.plg) done
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\LUMan.plg)
    2014/05/21 15:25:22.889 [4680:5628] LUMan: Entering Terminate
    2014/05/21 15:25:22.889 [4680:5628] LUMan: Waiting for command thread 3848 to complete...
    2014/05/21 15:25:22.889 [4680:5628] LUMan: Waiting for registry monitor thread 1168 to complete...
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\LUMan.plg) done
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\GUProxy.plg)
    2014/05/21 15:25:22.889 [4680:5628] GUProxy: Terminate called.
    2014/05/21 15:25:22.889 [4680:5628] GUProxy: Terminate
    2014/05/21 15:25:22.889 [4680:5628] GUProxy - StopGupPolicyThread() HTHREAD=0,Event=0
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\GUProxy.plg) done
    2014/05/21 15:25:22.889 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\AVMan.plg)
    2014/05/21 15:25:22.889 [4680:5628] AVMan: Entering Terminate
    2014/05/21 15:25:22.889 [4680:2812] AVMan: log forwarding shutting down
    2014/05/21 15:25:22.894 [4680:5628] AVMan: in AvPluginImplDeinit
    2014/05/21 15:25:22.894 [4680:5628] AVMan: in AvPluginImplDeinit
    2014/05/21 15:25:22.894 [4680:5628] AVMan: Leaving Terminate
    2014/05/21 15:25:22.894 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\AVMan.plg) done
    2014/05/21 15:25:22.894 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\ProfileMgrMan.plg)
    2014/05/21 15:25:22.894 [4680:5628] CProfileMgrManPlugin::Terminate: enter
    2014/05/21 15:25:22.894 [4680:5628] CSmcPluginBase::Terminate()
    2014/05/21 15:25:22.894 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\ProfileMgrMan.plg) done
    2014/05/21 15:25:22.894 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\LocalRep.plg)
    2014/05/21 15:25:22.894 [4680:5628] CSmcPluginBase::Terminate()
    2014/05/21 15:25:22.894 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\LocalRep.plg) done
    2014/05/21 15:25:22.894 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\CommonMan.plg)
    2014/05/21 15:25:22.894 [4680:5628] CSmcPluginBase::Terminate()
    2014/05/21 15:25:22.894 [4680:5628] Plugin::Terminate(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\CommonMan.plg) done
    2014/05/21 15:25:22.894 [4680:5628] Stop TridentEngine... 8364383
    2014/05/21 15:25:22.894 [4680:5628] TridentEngine Stopped.
    2014/05/21 15:25:22.894 [4680:5628] stop trident engine... successful
    2014/05/21 15:25:22.894 [4680:5628] delete trident engine...
    2014/05/21 15:25:22.984 [4680:5628] TSE stopped.
    2014/05/21 15:25:22.989 [4680:5628] delete SMC State...
    2014/05/21 15:25:22.994 [4680:5628] chmod on file C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\State\SerState.dat to read/write.
    2014/05/21 15:25:22.994 [4680:5628] delete netport...
    2014/05/21 15:25:22.994 [4680:5628] Disable damper...
    2014/05/21 15:25:22.999 [4680:5628] Acknowledge exit trigger
    2014/05/21 15:25:22.999 [4680:5204] Symantec Endpoint Protection is stopped
    2014/05/21 15:25:23.149 [4680:3692] System configuration has been saved.
    2014/05/21 15:25:26.049 [3892:4768] Command line has been handled
    2014/05/21 15:25:32.305 [1804:3972] Enterprise version, Build 4013!!!
    2014/05/21 15:25:32.350 [1804:3972] Starting Symantec Endpoint Protection
    2014/05/21 15:25:32.849 [3360:4364] Enterprise version, Build 4013!!!
    2014/05/21 15:25:32.854 [3360:4716] SetUserProfileDir: User Profile Location: C:\Windows\system32\config\systemprofile
    2014/05/21 15:25:32.879 [3360:4716] Created the message map
    2014/05/21 15:25:32.879 [3360:4716] Created the message map view
    2014/05/21 15:25:32.904 [3360:4716] Service ThreadID 75D7BB80
    2014/05/21 15:25:32.909 [3360:4716] smcProfile mode0
    2014/05/21 15:25:32.934 [3360:4716] Loading C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\Config\Cltdef.dat
    2014/05/21 15:25:32.959 [3360:4716] Loading C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\Config\Serdef.dat
    2014/05/21 15:25:33.046 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\CommonMan.plg)
    2014/05/21 15:25:33.046 [3360:4716] CSmcPluginBase::Initialize() called.
    2014/05/21 15:25:33.046 [3360:4716] CSmcPluginBase::Initialize() succeeded
    2014/05/21 15:25:33.046 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\CommonMan.plg) returned 1
    2014/05/21 15:25:33.046 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\LocalRep.plg)
    2014/05/21 15:25:33.046 [3360:4716] CSmcPluginBase::Initialize() called.
    2014/05/21 15:25:33.046 [3360:4716] CSmcPluginBase::Initialize() succeeded
    2014/05/21 15:25:33.046 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\LocalRep.plg) returned 1
    2014/05/21 15:25:33.046 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\ProfileMgrMan.plg)
    2014/05/21 15:25:33.046 [3360:4716] CSmcPluginBase::Initialize() called.
    2014/05/21 15:25:33.046 [3360:4716] CSmcPluginBase::Initialize() succeeded
    2014/05/21 15:25:33.046 [3360:4716] CProfileMgrManPlugin::Initialize: exit
    2014/05/21 15:25:33.046 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\ProfileMgrMan.plg) returned 1
    2014/05/21 15:25:33.046 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\AVMan.plg)
    2014/05/21 15:25:33.046 [3360:4716] AVMan: Init called.
    2014/05/21 15:25:33.046 [3360:4716] AVMan: Entering Initialize
    2014/05/21 15:25:33.056 [3360:4716] AVMan: Disabled event forwarding.
    2014/05/21 15:25:33.056 [3360:4716] AVMan: About to start LogForwarding.
    2014/05/21 15:25:33.056 [3360:4716] AVMan: in StartEventForwarderImplExShared
    2014/05/21 15:25:33.056 [3360:4716] AVMan: Leaving Initialize 1
    2014/05/21 15:25:33.056 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\AVMan.plg) returned 1
    2014/05/21 15:25:33.056 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\GUProxy.plg)
    2014/05/21 15:25:33.061 [3360:4716] GUProxy - StartGupPolicyThread() dwAliveTimes was turn off
    2014/05/21 15:25:33.061 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\GUProxy.plg) returned 1
    2014/05/21 15:25:33.061 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\LUMan.plg)
    2014/05/21 15:25:33.061 [3360:4716] LUMan: Init called.
    2014/05/21 15:25:33.061 [3360:4716] LUMan: Entering Initialize
    2014/05/21 15:25:33.061 [3360:5412] AVMan: aggregation interval: 300
    2014/05/21 15:25:33.061 [3360:5412] AVMan: initial log forwarding
    2014/05/21 15:25:33.066 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\LUMan.plg) returned 1
    2014/05/21 15:25:33.066 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\SfMan.plg)
    2014/05/21 15:25:33.066 [3360:4716] SfMan: Initializing.
    2014/05/21 15:25:33.906 [1804:3972] Symantec Endpoint Protection started.
    2014/05/21 15:25:33.936 [1804:3972] Command line has been handled
    2014/05/21 15:25:34.081 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\SfMan.plg) returned 1
    2014/05/21 15:25:34.081 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\DevMan.plg)
    2014/05/21 15:25:34.086 [3360:4716] DevMan: Initializing.
    2014/05/21 15:25:34.086 [3360:4716] DevMan: Now the SEP doesn't run in Safe mode with network.
    2014/05/21 15:25:34.156 [3360:4716] DevMan: Start creating ThreadEngine
    2014/05/21 15:25:34.156 [3360:4716] DevMan: ThreadEngine is created! 
    2014/05/21 15:25:34.591 [3360:4716] DevMan: ========== Device Manage Is Plugged In. ==========
    2014/05/21 15:25:34.591 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\DevMan.plg) returned 1
    2014/05/21 15:25:34.591 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\AtpiMan.plg)
    2014/05/21 15:25:34.591 [3360:4716] CSmcPluginBase::Initialize() called.
    2014/05/21 15:25:34.591 [3360:4716] CSmcPluginBase::Initialize() succeeded
    2014/05/21 15:25:34.591 [3360:4716] AtpiMan: Leaving Initialize 1
    2014/05/21 15:25:34.591 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\AtpiMan.plg) returned 1
    2014/05/21 15:25:34.591 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\BashMan.plg)
    2014/05/21 15:25:34.591 [3360:4716] CSmcPluginBase::Initialize() called.
    2014/05/21 15:25:34.591 [3360:4716] CSmcPluginBase::Initialize() succeeded
    2014/05/21 15:25:34.591 [3360:4716] BashMan: Leaving Initialize 1
    2014/05/21 15:25:34.591 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\BashMan.plg) returned 1
    2014/05/21 15:25:34.591 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\CIDSMan.plg)
    2014/05/21 15:25:34.596 [3360:4716] CSmcPluginBase::Initialize() called.
    2014/05/21 15:25:34.596 [3360:4716] CSmcPluginBase::Initialize() succeeded
    2014/05/21 15:25:34.596 [3360:4716] CidsMan: Leaving Initialize succeeded
    2014/05/21 15:25:34.596 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\CIDSMan.plg) returned 1
    2014/05/21 15:25:34.596 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\RebootMgrMan.plg)
    2014/05/21 15:25:34.596 [3360:4716] CSmcPluginBase::Initialize() called.
    2014/05/21 15:25:34.596 [3360:4716] CSmcPluginBase::Initialize() succeeded
    2014/05/21 15:25:34.611 [3360:4716] RebootMgrMan: Leaving Initialize 1
    2014/05/21 15:25:34.611 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\RebootMgrMan.plg) returned 1
    2014/05/21 15:25:34.611 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\RepMgtMan.plg)
    2014/05/21 15:25:34.611 [3360:4716] CSmcPluginBase::Initialize() called.
    2014/05/21 15:25:34.611 [3360:4716] CSmcPluginBase::Initialize() succeeded
    2014/05/21 15:25:34.616 [3360:4716] RepMgtMan: Leaving Initialize 1
    2014/05/21 15:25:34.616 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\RepMgtMan.plg) returned 1
    2014/05/21 15:25:34.616 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\SubmissionsMan.plg)
    2014/05/21 15:25:34.616 [3360:4716] CSmcPluginBase::Initialize() called.
    2014/05/21 15:25:34.616 [3360:4716] CSmcPluginBase::Initialize() succeeded
    2014/05/21 15:25:34.616 [3360:4716] SubmissionsMan: Leaving Initialize 1
    2014/05/21 15:25:34.616 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\SubmissionsMan.plg) returned 1
    2014/05/21 15:25:34.616 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\NacManager.plg)
    2014/05/21 15:25:34.616 [3360:4716] <NacManager> Init called.
    2014/05/21 15:25:34.621 [3360:4716] <NacManger> Nac init
    2014/05/21 15:25:34.621 [3360:4716] Plugin::Initialize(C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\NacManager.plg) returned 1
    2014/05/21 15:25:34.621 [3360:4716] <GetProductLanguage> Loaded language string from the registry: Simplified Chinese
    2014/05/21 15:25:34.621 [3360:4716] current package language type: Simplified Chinese
    2014/05/21 15:25:34.621 [3360:4716] Client package checksum ba8780996ab52584c27ff9c71baf1330 is imported from 'C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\Cached Installs\SetAid.ini'
    2014/05/21 15:25:34.621 [3360:4716] firewall feature status:1
    2014/05/21 15:25:34.626 [3360:4716] Changing control mode 0
    2014/05/21 15:25:34.626 [3360:4716] Init TPM device...
    2014/05/21 15:25:34.676 [3360:4716] Creating SyLink...
    2014/05/21 15:25:34.686 [3360:4716] CProfileMgrManPlugin::ReceiveMessage: enter
    2014/05/21 15:25:34.686 [3360:4716] ProfileMgrMan: ReceiveMessage with msg id 262147
    2014/05/21 15:25:34.686 [3360:4716] CProfileMgrManPlugin::ReceiveMessage: exit
    2014/05/21 15:25:34.686 [3360:4716] AVMan: Entering ReceiveMessage with msg id 262147
    2014/05/21 15:25:34.686 [3360:4716] AVMan: Leaving ReceiveMessage
    2014/05/21 15:25:34.686 [3360:4716] LUMan: Entering ReceiveMessage with id 0x40003
    2014/05/21 15:25:34.686 [3360:4716] AtpiMan: Entering ReceiveMessage with msg id 262147
    2014/05/21 15:25:34.686 [3360:4716] AtpiMan: Leaving ReceiveMessage
    2014/05/21 15:25:34.686 [3360:4716] BashMan: Entering ReceiveMessage with msg id 262147
    2014/05/21 15:25:34.686 [3360:4716] BashMan: Leaving ReceiveMessage
    2014/05/21 15:25:34.686 [3360:4716] CidsMan: Entering ReceiveMessage with msg id 262147
    2014/05/21 15:25:34.686 [3360:4716] CidsMan: Leaving ReceiveMessage
    2014/05/21 15:25:34.686 [3360:4716] RebootMgrMan: Entering ReceiveMessage with msg id 262147
    2014/05/21 15:25:34.686 [3360:4716] RebootMgrMan: Leaving ReceiveMessage
    2014/05/21 15:25:34.686 [3360:4716] RepMgtMan: Entering ReceiveMessage with msg id 262147
    2014/05/21 15:25:34.686 [3360:4716] RepMgtMan: Leaving ReceiveMessage
    2014/05/21 15:25:34.686 [3360:4716] SubmissionsMan: Entering ReceiveMessage with msg id 262147
    2014/05/21 15:25:34.686 [3360:4716] SubmissionsMan: Leaving ReceiveMessage
    2014/05/21 15:25:34.686 [3360:4716] Lock held for 16ms
    2014/05/21 15:25:34.686 [3360:4716] Sylink is created
    2014/05/21 15:25:34.686 [3360:4716] InitACS , HI result passed to Location sensor is  4
    2014/05/21 15:25:34.691 [3360:4716] AutoLocationRunningEvent existed.  
    2014/05/21 15:25:34.691 [3360:4716] AutoLocationFrequencyUpdateEvent existed.  
    2014/05/21 15:25:34.691 [3360:4716] hAutoLocationSwitchEvent existed.  
    2014/05/21 15:25:34.691 [3360:5156] Auto location ThreadID = 5156
    2014/05/21 15:25:34.691 [3360:4716] initial HI checking delay is :60000
    2014/05/21 15:25:34.691 [3360:4716] HI: Script reader set default path to 
    2014/05/21 15:25:34.696 [3360:4716] HI: GetNewDefsNotifyFile C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\Definitions\HIDefs\newdefs-trigger\trigger.dat
    2014/05/21 15:25:34.696 [3360:4716] HI: DefUtils is initialized.
    2014/05/21 15:25:34.696 [3360:4716] HI: Initialize HI Content flag file change event successfully.
    2014/05/21 15:25:34.696 [3360:4716] HI: HI Engine current grace period status 126144001
    2014/05/21 15:25:34.696 [3360:4716] HI: ResetHIResult set HI result to HI_CHECK_DISBALED since HI is disabled.
    2014/05/21 15:25:34.696 [3360:4716] HI: HI Content Sequence Number is: 130814001
    2014/05/21 15:25:34.696 [3360:4716] HI: Script reader set default path to C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\Definitions\HIDefs\20130814.001\
    2014/05/21 15:25:34.701 [3360:4716] HI: HI Content full verion is: 12.1.400.002
    2014/05/21 15:25:34.701 [3360:4716] HI: HI Content verion is: 12.1.400.2
    2014/05/21 15:25:34.701 [3360:4716] HI: required user logon is changed to 1
    2014/05/21 15:25:34.701 [3360:4716] HI: Current Policy changed to D5A338CD0A0110A10196AA1A9D51F844
    2014/05/21 15:25:34.701 [3360:4716] HI: Policy enable status changed
    2014/05/21 15:25:34.701 [3360:4716] HI: apply new HI config done, Enabled: 1, Trigger Type: 1, HI Timer 120
    2014/05/21 15:25:34.701 [3360:4716] HI: reset to history result in location 榛樿鍊?
    2014/05/21 15:25:34.701 [3360:4716] HI: set HI result to HI_CHECK_FAIL.
    2014/05/21 15:25:34.701 [3360:4716] HI: reset HI timer trigger. Enabled: 1
    2014/05/21 15:25:34.706 [3360:4716] HI: set HI result to HI_CHECK_FAIL.
    2014/05/21 15:25:34.706 [3360:4716] HI: reset to history result in location 榛樿鍊?
    2014/05/21 15:25:34.706 [3360:4716] HI: set HI result to HI_CHECK_FAIL.
    2014/05/21 15:25:34.706 [3360:4716] HI: Init HI Engine done.
    2014/05/21 15:25:34.706 [3360:4716] <SyLink>HI status is changed to=0; reason=103; rule=鏈€氳繃涓绘満瀹屾暣鎬ф鏌?
      瑕佹眰: "闃茬梾姣掕姹?宸查€氳繃
      瑕佹眰: "闃茬伀澧欒姹?鏈€氳繃

    2014/05/21 15:25:34.706 [3360:4716] StartEngine: reason=Initialize.
    2014/05/21 15:25:34.706 [3360:2864] LUMan: Entering ReceiveMessage with id 0x6860006
    2014/05/21 15:25:34.706 [3360:2864] LUMan: Entering PolicyUpdateCallback
    2014/05/21 15:25:34.706 [3360:2864] LuMan: LueTim is not ready, will retry later.
    2014/05/21 15:25:34.706 [3360:2864] Smc: LicenseNotificationFunction() - has notified LuMan that our license has been updated
    2014/05/21 15:25:34.716 [3360:4716] TeeferOpen Mem=768 NIC={358A3D7C-3799-4509-8EAA-89F9FBE2A97C}...2014/05/21 15:25:34.716 [3360:4716] Success
    2014/05/21 15:25:34.716 [3360:4716] TSE is located at: C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\
    2014/05/21 15:25:34.716 [3360:4716] TSE extended debugging is turned off. Flag = 0
    2014/05/21 15:25:34.716 [3360:4716] D2D connection optimization mode is open by default
    2014/05/21 15:25:34.751 [3360:4716] TSE Smart Gateway is turned on
    2014/05/21 15:25:34.751 [3360:4716] TSE started.
    2014/05/21 15:25:34.751 [3360:4716] StartTridentEngine : Apply new config into profile in location 榛樿鍊?
    2014/05/21 15:25:34.751 [3360:4716] CGuiControl:Snac is enabled? 1
    2014/05/21 15:25:34.751 [3360:4716] strLocation after switch to appointed榛樿鍊?
    2014/05/21 15:25:34.751 [3360:4716] The best location need to be switch is: 榛樿鍊?
    2014/05/21 15:25:34.756 [3360:4716] <SyLink>SetCurLocationID=榛樿鍊?
    2014/05/21 15:25:35.161 [3360:4716] CProfileMgrManPlugin::notificationOfNewConfig: enter
    2014/05/21 15:25:35.161 [3360:4716] CProfileMgrManPlugin::processNewProfile: enter
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::techPluginInfoCallback: enter
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: enter
    2014/05/21 15:25:35.186 [3360:4716] [0039C608] register plugin to profile manager succeeded
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: exit
    2014/05/21 15:25:35.186 [3360:4716] XSD added for plug-in: 
    2014/05/21 15:25:35.186 [3360:4716] C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\CommonMan.plg
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: enter
    2014/05/21 15:25:35.186 [3360:4716] [022C4018] register plugin to profile manager succeeded
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: exit
    2014/05/21 15:25:35.186 [3360:4716] XSD added for plug-in: 
    2014/05/21 15:25:35.186 [3360:4716] C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\LocalRep.plg
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: enter
    2014/05/21 15:25:35.186 [3360:4716] [022FE170] register plugin to profile manager failed: 0x80010302
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: exit
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: enter
    2014/05/21 15:25:35.186 [3360:4716] [022FE170] register plugin to profile manager failed: 0x80010302
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: exit
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: enter
    2014/05/21 15:25:35.186 [3360:4716] [022FE170] register plugin to profile manager failed: 0x80010302
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: exit
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: enter
    2014/05/21 15:25:35.186 [3360:4716] [022FE170] register plugin to profile manager succeeded
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: exit
    2014/05/21 15:25:35.186 [3360:4716] XSD added for plug-in: 
    2014/05/21 15:25:35.186 [3360:4716] C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\SfMan.plg
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: enter
    2014/05/21 15:25:35.186 [3360:4716] [022FE1C0] register plugin to profile manager succeeded
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: exit
    2014/05/21 15:25:35.186 [3360:4716] XSD added for plug-in: 
    2014/05/21 15:25:35.186 [3360:4716] C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\DevMan.plg
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: enter
    2014/05/21 15:25:35.186 [3360:4716] [022FE288] register plugin to profile manager failed: 0x8001ffff
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: exit
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: enter
    2014/05/21 15:25:35.186 [3360:4716] [022FE288] register plugin to profile manager succeeded
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: exit
    2014/05/21 15:25:35.186 [3360:4716] XSD added for plug-in: 
    2014/05/21 15:25:35.186 [3360:4716] C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\BashMan.plg
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: enter
    2014/05/21 15:25:35.186 [3360:4716] [022FE300] register plugin to profile manager succeeded
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: exit
    2014/05/21 15:25:35.186 [3360:4716] XSD added for plug-in: 
    2014/05/21 15:25:35.186 [3360:4716] C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\CIDSMan.plg
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: enter
    2014/05/21 15:25:35.186 [3360:4716] [022C3E20] register plugin to profile manager succeeded
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: exit
    2014/05/21 15:25:35.186 [3360:4716] XSD added for plug-in: 
    2014/05/21 15:25:35.186 [3360:4716] C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\RebootMgrMan.plg
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: enter
    2014/05/21 15:25:35.186 [3360:4716] [022FE580] register plugin to profile manager failed: 0x8001ffff
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: exit
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: enter
    2014/05/21 15:25:35.186 [3360:4716] [022C3F70] register plugin to profile manager succeeded
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: exit
    2014/05/21 15:25:35.186 [3360:4716] XSD added for plug-in: 
    2014/05/21 15:25:35.186 [3360:4716] C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Bin\SubmissionsMan.plg
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: enter
    2014/05/21 15:25:35.186 [3360:4716] [022FE5F8] register plugin to profile manager failed: 0x80010302
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::addPluginXsd: exit
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::techPluginInfoCallback: exit
    2014/05/21 15:25:35.186 [3360:4716] Applied profile successfully
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::processNewProfile: exit
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::notificationOfNewConfig: exit
    2014/05/21 15:25:35.186 [3360:4716] NotifyNewProfileApplied: calling plugin for new policy
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::notificationOfConfigApplied: enter
    2014/05/21 15:25:35.186 [3360:4716] CProfileMgrManPlugin::notificationOfConfigApplied: exit
    2014/05/21 15:25:35.186 [3360:4716] AVMan: Entering PolicyUpdateCallback
    2014/05/21 15:25:35.186 [3360:3692] <NacManager> SNAC is licensed
    2014/05/21 15:25:35.186 [3360:3692] <NacManager> NAP is not enabled!
    2014/05/21 15:25:35.186 [3360:3692] <NacManager> AltCommMethodWithEnforcer is not enabled. GetDHCPGWEnforcerUseAltCommWithEnforcerEnabled failed!
    2014/05/21 15:25:35.186 [3360:3692] r
    2014/05/21 15:25:35.186 [3360:3692] <NacManger@668> GetP2PProfileChangeMsgData EnanbleAuthentication:0 AllowTime:0 RejectTime:0 AuthPacket:0 PacketInterval:0
    2014/05/21 15:25:35.186 [3360:3692] <NacManager> runtime->fConnected is FALSE. Skip to write P2P_PROFILE_CHANGE_MSG into pipe.
    2014/05/21 15:25:35.241 [3360:4716] AVMan: policy retrieved
    2014/05/21 15:25:35.241 [3360:4716] AVMan: in ParsePolicyXmlImpl
    2014/05/21 15:25:35.241 [3360:4716] AVMan: in ParsePolicyXmlViaTempFile
    2014/05/21 15:25:35.241 [3360:4716] AVMan: in ParsePolicyXmlToFile
    2014/05/21 15:25:35.266 [3360:4716] AVMan: Leaving PolicyUpdateCallback
    2014/05/21 15:25:35.266 [3360:4716] GUProxy: PolicyUpdateCallback called
    2014/05/21 15:25:35.291 [3360:4716] GUProxy - UseMasterClient [0]
    2014/05/21 15:25:35.291 [3360:4716] GUProxy - Is this computer a GUP Server? [0]
    2014/05/21 15:25:35.291 [3360:4716] LUMan: Entering PolicyUpdateCallback
    2014/05/21 15:25:35.291 [3360:4716] LuMan: LueTim is not ready, will retry later.
    2014/05/21 15:25:35.291 [3360:4716] NotifyNewProfileApplied: calling plugin for new policy done.
    2014/05/21 15:25:35.291 [3360:4716] Firewall driver is not installed/opened, not apply the config to CWindowsFirewallManager.
    2014/05/21 15:25:35.291 [3360:4716] New location is  榛樿鍊?
    2014/05/21 15:25:35.291 [3360:4716] Third party is Disabled
    2014/05/21 15:25:35.291 [3360:4716] SPC Content Source is Disabled
    2014/05/21 15:25:35.291 [3360:4716] changing heartbeat for location 榛樿鍊?
    2014/05/21 15:25:35.291 [3360:5156] Auto location: Trident Started = 1
    2014/05/21 15:25:35.291 [3360:5156] Ready to do Autolocation.  First Time =1
    2014/05/21 15:25:35.291 [3360:4716] changed heartbeat status to  1
    2014/05/21 15:25:35.291 [3360:4900] CProfileMgrManPlugin::Enable: enter
    2014/05/21 15:25:35.291 [3360:4900] enable=true
    2014/05/21 15:25:35.291 [3360:4900] CProfileMgrManPlugin::Enable: exit
    2014/05/21 15:25:35.291 [3360:4900] AVMan: Entering Enable -- enable=true
    2014/05/21 15:25:35.291 [3360:4900] AVMan: Entering ExportUseNewConfig
    2014/05/21 15:25:35.291 [3360:4900] AVMan: Entering UseNewConfig()
    2014/05/21 15:25:35.291 [3360:4900] AVMan: Leaving UseNewConfig()
    2014/05/21 15:25:35.291 [3360:4900] AVMan: Leaving ExportUseNewConfig
    2014/05/21 15:25:35.291 [3360:4900] AVMan: Disabled event forwarding.
    2014/05/21 15:25:35.291 [3360:4900] GUProxy: Enable called.
    2014/05/21 15:25:35.291 [3360:4900] GUProxy: Enable
    2014/05/21 15:25:35.291 [3360:4900] AtpiMan: Entering Enable -- enable=true
    2014/05/21 15:25:35.291 [3360:4900] BashMan: Entering Enable -- enable=true
    2014/05/21 15:25:35.291 [3360:4900] CidsMan: Entering Enable -- enable=true
    2014/05/21 15:25:35.291 [3360:4716] HI: required user logon is changed to 1
    2014/05/21 15:25:35.291 [3360:4900] RebootMgrMan: Entering Enable -- enable=true
    2014/05/21 15:25:35.291 [3360:4900] RepMgtMan: Entering Enable -- enable=true
    2014/05/21 15:25:35.291 [3360:4900] SubmissionsMan: Entering Enable -- enable=true
    2014/05/21 15:25:35.291 [3360:4716] HI: apply new HI config done, Enabled: 1, Trigger Type: 1, HI Timer 120
    2014/05/21 15:25:35.291 [3360:3692] <NacManger@383> pipe listening 997
    2014/05/21 15:25:35.291 [3360:4716] IDS load profile cancelled since no FW installed
    2014/05/21 15:25:35.291 [3360:5156] Snac HiTest:0,  0
    2014/05/21 15:25:35.291 [3360:5156] First Time AutoLocation.  Must notify GUI
    2014/05/21 15:25:35.291 [3360:5156] Location changed in Autolocation: Notify GUI and apply new config into profile in location 榛樿鍊?
    2014/05/21 15:25:35.291 [3360:5156] Sending Location Change to GUI
    2014/05/21 15:25:35.291 [3360:4716] Start TridentEngine...8376785
    2014/05/21 15:25:35.296 [3360:5156] Silent mode has been disabled.
    2014/05/21 15:25:35.301 [3360:4716] AutoLocationRunningEvent existed.  
    2014/05/21 15:25:35.301 [3360:4716] AutoLocationFrequencyUpdateEvent existed.  
    2014/05/21 15:25:35.301 [3360:4716] hAutoLocationSwitchEvent existed.  
    2014/05/21 15:25:35.306 [3360:5156] CGuiControl::ChangeLocation Location:榛樿鍊?
    2014/05/21 15:25:35.316 [3360:4716] GetUserAndDomain in smc: Trying to get the User/Domain
    2014/05/21 15:25:35.321 [3360:4716] <SearchSessionExeRunningProcCallback> Process session Id=1, State =0
    2014/05/21 15:25:35.321 [3360:4716] <GetUserAndDomain> The current user's session id=1, Explorer Process Id=1984
    2014/05/21 15:25:35.321 [3360:4716] <GetDomainHostName>+++++++++++++++win2000 hostName=snpi-p510018,DomainName=gnpjvc.cgnpc.com.cn
    2014/05/21 15:25:35.326 [3360:4716] <SyLink>Computer Network Identity (Domain/Host)=gnpjvc.cgnpc.com.cn/snpi-p510018
    2014/05/21 15:25:35.326 [3360:4716] Start SyLink...
    2014/05/21 15:25:35.326 [3360:4900] Sending Profile serial Number to Server :4067-05/20/2014 09:01:18 424
    2014/05/21 15:25:35.326 [3360:4900] changing heartbeat for location 榛樿鍊?
    2014/05/21 15:25:35.326 [3360:4716] <SyLink>Import Config File !!
    2014/05/21 15:25:35.326 [3360:4716] <Start>Succeed to set the managed status to SylinkStats
    2014/05/21 15:25:35.331 [3360:4716] <GetDomainHostName>+++++++++++++++win2000 hostName=snpi-p510018,DomainName=gnpjvc.cgnpc.com.cn
    2014/05/21 15:25:35.331 [3360:4716] <SyLink>Computer Network Identity (Domain/Host)=gnpjvc.cgnpc.com.cn/snpi-p510018
    2014/05/21 15:25:35.351 [3360:4716] <HWID CSyLink::mfn_CalcHardwareKey> Get Hardware ID
    2014/05/21 15:25:35.416 [3360:3692] <NacManager> SNAC is licensed
    2014/05/21 15:25:35.416 [3360:3692] <NacManager> NAP is not enabled!
    2014/05/21 15:25:35.416 [3360:3692] <NacManager> AltCommMethodWithEnforcer is not enabled. GetDHCPGWEnforcerUseAltCommWithEnforcerEnabled failed!
    2014/05/21 15:25:35.416 [3360:3692] r
    2014/05/21 15:25:35.416 [3360:3692] <NacManger@668> GetP2PProfileChangeMsgData EnanbleAuthentication:0 AllowTime:0 RejectTime:0 AuthPacket:0 PacketInterval:0
    2014/05/21 15:25:35.416 [3360:3692] <NacManager> Write P2P_PROFILE_CHANGE_MSG into pipe.
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><ComplianceEngine@501> Smc Started = 1
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><ComplianceEngine@511> compliance status changed, update SHM
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><PrintComplianceStatus@1624> Compliance status report: HI Status = 0, HI Reason = 103, Hi Token = 0, HI Failed Rule = 鏈€氳繃涓绘満瀹屾暣鎬ф鏌?
      瑕佹眰: "闃茬梾姣掕姹?宸查€氳繃
      瑕佹眰: "闃茬伀澧欒姹?鏈€氳繃

    2014/05/21 15:25:35.416 [3360:3692] <SNAC><PrintComplianceStatus@1625> Profile Serial Number = 4067-05/20/2014 09:01:18 424
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><PrintComplianceStatus@1628> AgentGUID = 6C8EE4ED328CEC181A3CDC037C00359616E18667E194C5C1937417ADDD6EEBE780A37CE93F064026606FA3CAF9A5D0C67998AB287E963600A2F56728DCB2151515CCB3790A011082017F3D820A3094E2
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><GatewayClient@826> Update Compliance status
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><send_update_status_pkt@1878>Ready to Send update status!

    2014/05/21 15:25:35.416 [3360:3692] <SNAC><LanClient@3039> Handle Compliance status changed request
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><LanClient@3040> Original compliance status:
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><PrintComplianceStatus@1624> Compliance status report: HI Status = 5, HI Reason = 0, Hi Token = 0, HI Failed Rule = 
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><PrintComplianceStatus@1625> Profile Serial Number = 
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><PrintComplianceStatus@1628> AgentGUID = 6C8EE4ED328CEC181A3CDC037C00359616E18667E194C5C1937417ADDD6EEBE780A37CE93F064026606FA3CAF9A5D0C67998AB287E963600A2F56728DCB2151515CCB3790A011082017F3D820A3094E2
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><LanClient@3045> New compliance status:
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><PrintComplianceStatus@1624> Compliance status report: HI Status = 0, HI Reason = 103, Hi Token = 0, HI Failed Rule = 鏈€氳繃涓绘満瀹屾暣鎬ф鏌?
      瑕佹眰: "闃茬梾姣掕姹?宸查€氳繃
      瑕佹眰: "闃茬伀澧欒姹?鏈€氳繃

    2014/05/21 15:25:35.416 [3360:3692] <SNAC><PrintComplianceStatus@1625> Profile Serial Number = 4067-05/20/2014 09:01:18 424
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><PrintComplianceStatus@1628> AgentGUID = 6C8EE4ED328CEC181A3CDC037C00359616E18667E194C5C1937417ADDD6EEBE780A37CE93F064026606FA3CAF9A5D0C67998AB287E963600A2F56728DCB2151515CCB3790A011082017F3D820A3094E2
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><LanClient@3056> send reauth request since compliance status change!
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><LanClient@7830> send_reauth_request is called.
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><LanClient@3056> send reauth request since compliance status change!
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><LanClient@7830> send_reauth_request is called.
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><LanClient@3056> send reauth request since compliance status change!
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><LanClient@7830> send_reauth_request is called.
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><LanClient@850> Send EAPOL start request from other source
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><LanClient@3384> HandleEapolStartRequest entered
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><LanClient@7918> Send EAPOL Start in SendEAPOLStartPacket
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><LanClient@3483> send eapol start ok, {358A3D7C-3799-4509-8EAA-89F9FBE2A97C}, Bluetooth , 0
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><LanClient@7918> Send EAPOL Start in SendEAPOLStartPacket
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><PluginManager@1783> NAP is not enabled.
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><PluginManager@1867> HandleSmcProfileConfigChangedRequest, NAP Enable: 0, SnacNapSha: 0, LANClient: 1
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><LanClient@3483> send eapol start ok, {DA1290EC-7419-4278-B334-EA67E319D885}, Realtek PCIe GBE Family Controller, 0
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><LanClient@7918> Send EAPOL Start in SendEAPOLStartPacket
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><P2PAuth@326>P2pUpdateConfig: enable 0, allowTime 0, rejectTime 0, authPackets 0, authInterval 0


    2014/05/21 15:25:35.416 [3360:3692] <SNAC><LanClient@3479> Fail to send eapol start, {65B61454-A312-4BD4-B443-6664C5BB8354}, 1x1 11b/g/n , 1
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><PluginManager@2281> HandleReloadComplianceStatusRequest
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><PluginManager@2305> g_hNTDLL is 6D740000, g_lpNapData is 0
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><PluginManager@553> Triggering an event to initialize WGX runtime initialization.
    2014/05/21 15:25:35.416 [3360:3692] <SNAC><LanClient@938> Initializing WGX for LANClient runtime
    2014/05/21 15:25:35.766 [3360:5156] Snac HiTest:0,  0
    2014/05/21 15:25:35.766 [3360:5156] HI: HI Engine is starting, creating new HI thread
    2014/05/21 15:25:35.766 [3360:5156] HI: reset to history result in location 榛樿鍊?
    2014/05/21 15:25:35.766 [3360:5156] HI: set HI result to HI_CHECK_FAIL.
    2014/05/21 15:25:35.766 [3360:1028] HI: HI Engine Thread ID 1028
    2014/05/21 15:25:36.236 [3360:4716] <HWID CSyLink::mfn_CalcHardwareKey> Hardware ID assigned: 753197866FBA04DE1AE964494E24B4CD
    2014/05/21 15:25:36.236 [3360:2880] <CreateHeartThread>To create Heartbeat.
    2014/05/21 15:25:36.236 [3360:4716] <SyLink>Started, contact SMS every 300 seconds
    2014/05/21 15:25:36.236 [3360:4716] <SyLink>Can't get current package checksum!
    2014/05/21 15:25:36.236 [3360:4716] Lock held for 905ms
    2014/05/21 15:25:36.236 [3360:4900] Lock acquire took 905ms
    2014/05/21 15:25:36.236 [3360:4900] changed heartbeat status to  1
    2014/05/21 15:25:36.236 [3360:4716] start sylink successful
    2014/05/21 15:25:36.236 [3360:4900] HI: required user logon is changed to 1
    2014/05/21 15:25:36.236 [3360:4900] HI: apply new HI config done, Enabled: 1, Trigger Type: 1, HI Timer 120
    2014/05/21 15:25:36.246 [3360:4900] CGuiControl::SynchronousUseNewConfig Location:榛樿鍊?
    2014/05/21 15:25:36.256 [3360:4716] Calling Command Processor again.
    2014/05/21 15:25:36.411 [3360:4900] CGuiControl:Snac is enabled? 1
    2014/05/21 15:25:36.411 [3360:4900] SNAC is licensed, changing the SNAC service's startup type
    2014/05/21 15:25:36.411 [3360:4716] QuerySysPlantStatus: Entering
    2014/05/21 15:25:36.416 [3360:4784] GetUserAndDomain in smc: Trying to get the User/Domain
    2014/05/21 15:25:36.416 [3360:3692] <SNAC><LanClient@2874> send reauth request since wait time out!
    2014/05/21 15:25:36.416 [3360:3692] <SNAC><LanClient@7830> send_reauth_request is called.
    2014/05/21 15:25:36.421 [3360:4784] <SearchSessionExeRunningProcCallback> Process session Id=1, State =0
    2014/05/21 15:25:36.421 [3360:4784] <GetUserAndDomain> The current user's session id=1, Explorer Process Id=1984
    2014/05/21 15:25:36.421 [3360:3692] <SNAC><LanClient@850> Send EAPOL start request from other source
    2014/05/21 15:25:36.421 [3360:3692] <SNAC><LanClient@3384> HandleEapolStartRequest entered
    2014/05/21 15:25:36.421 [3360:3692] <SNAC><LanClient@7918> Send EAPOL Start in SendEAPOLStartPacket
    2014/05/21 15:25:36.421 [3360:3692] <SNAC><LanClient@3479> Fail to send eapol start, {65B61454-A312-4BD4-B443-6664C5BB8354}, 1x1 11b/g/n , 1
    2014/05/21 15:25:36.796 [3360:4716] QuerySysPlantStatus: SysPlant startType is START in registry
    2014/05/21 15:25:36.796 [3360:4716] QuerySysPlantStatus: SysPlant driver is running
    2014/05/21 15:25:36.796 [3360:4716] QuerySysPlantStatus: Exiting
    2014/05/21 15:25:36.801 [3360:4716] <CircularLogFile> using server-configured log file size of 524288
    2014/05/21 15:25:36.801 [3360:4716] <CircularLogFile> set log file size to 524288
    2014/05/21 15:25:36.801 [3360:4716] <BuildEntryOffsetArray> starting
    2014/05/21 15:25:36.801 [3360:4716] <BuildEntryOffsetArray> completed. Array enties: 0
    2014/05/21 15:25:36.801 [3360:4716] creating tech extension CommonMan
    2014/05/21 15:25:36.801 [3360:4716] <CircularLogFile> using server-configured log file size of 524288
    2014/05/21 15:25:36.801 [3360:4716] <CircularLogFile> set log file size to 524288
    2014/05/21 15:25:36.801 [3360:4716] <BuildEntryOffsetArray> starting
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> completed. Array enties: 0
    2014/05/21 15:25:36.806 [3360:4716] creating tech extension LocalRep
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> using server-configured log file size of 524288
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> set log file size to 524288
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> starting
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> completed. Array enties: 0
    2014/05/21 15:25:36.806 [3360:4716] creating tech extension AVMan
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> using server-configured log file size of 524288
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> set log file size to 524288
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> starting
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> completed. Array enties: 0
    2014/05/21 15:25:36.806 [3360:4716] creating tech extension GUP
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> using server-configured log file size of 524288
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> set log file size to 524288
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> starting
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> completed. Array enties: 0
    2014/05/21 15:25:36.806 [3360:4716] creating tech extension LUMan
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> using server-configured log file size of 524288
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> set log file size to 524288
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> starting
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> completed. Array enties: 0
    2014/05/21 15:25:36.806 [3360:4716] creating tech extension SfMan
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> using server-configured log file size of 524288
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> set log file size to 524288
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> starting
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> completed. Array enties: 0
    2014/05/21 15:25:36.806 [3360:4716] creating tech extension DevMan
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> using server-configured log file size of 524288
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> set log file size to 524288
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> starting
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> completed. Array enties: 0
    2014/05/21 15:25:36.806 [3360:4716] creating tech extension AtpiMan
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> using server-configured log file size of 524288
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> set log file size to 524288
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> starting
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> completed. Array enties: 0
    2014/05/21 15:25:36.806 [3360:4716] creating tech extension BashMan
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> using server-configured log file size of 524288
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> set log file size to 524288
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> starting
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> completed. Array enties: 0
    2014/05/21 15:25:36.806 [3360:4716] creating tech extension CidsMan
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> using server-configured log file size of 524288
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> set log file size to 524288
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> starting
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> completed. Array enties: 0
    2014/05/21 15:25:36.806 [3360:4716] creating tech extension RebootMgrMan
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> using server-configured log file size of 524288
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> set log file size to 524288
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> starting
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> completed. Array enties: 0
    2014/05/21 15:25:36.806 [3360:4716] creating tech extension RepMgtMan
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> using server-configured log file size of 524288
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> set log file size to 524288
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> starting
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> completed. Array enties: 0
    2014/05/21 15:25:36.806 [3360:4716] creating tech extension SubmissionsMan
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> using server-configured log file size of 524288
    2014/05/21 15:25:36.806 [3360:4716] <CircularLogFile> set log file size to 524288
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> starting
    2014/05/21 15:25:36.806 [3360:4716] <BuildEntryOffsetArray> completed. Array enties: 0
    2014/05/21 15:25:36.806 [3360:4716] creating tech extension NacMan
    2014/05/21 15:25:36.806 [3360:4716] 

    Windows 版本信息

    操作系统: Windows 7 (6.1.7601 Service Pack 1)
    2014/05/21 15:25:36.806 [3360:4716] 

    网络信息:

    No.0  "本地连接"  08-9e-01-32-23-66  "Realtek PCIe GBE Family Controller" 10.60.10.151 


    2014/05/21 15:25:36.811 [3360:4716] 

    应用程序列表:

    0)    Adobe Flash Player 11 ActiveX 

    1)    Broadcom 802.11 Network Adapter 

    2)    Microsoft Office Enterprise 2007 

    3)    Lenovo Auto Scroll Utility 

    4)    On Screen Display 

    5)    Lenovo Power Management Driver 

    6)    SAP Business Explorer 

    7)    SAP GUI for Windows 7.30 

    8)    SecurityDesktop 

    9)    搜狗拼音输入法 6.2正式版 

    10)    搜狗五笔输入法 2.0正式版 

    11)    WinRAR 4.00 (32 位) 

    12)    Symantec Endpoint Protection 

    13)    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 

    14)    Microsoft redistributable runtime DLLs VS2010 SP1 (x86) 

    15)    Intel(R) USB 3.0 eXtensible Host Controller Driver 

    16)    LyncPlus 

    17)    ThinkVantage 指纹软件 

    18)    Cisco LEAP Module 

    19)    Cisco EAP-FAST Module 

    20)    Intel(R) Management Engine Components 

    21)    Intel? Trusted Connect Service Client 

    22)    Microsoft Lync 2010 

    23)    ThinkVantage Communications Utility 

    24)    Microsoft Silverlight 

    25)    NVIDIA PhysX 

    26)    Microsoft Office Access MUI (Chinese (Simplified)) 2007 

    27)    2007 Microsoft Office Suite Service Pack 2 (SP2) 

    28)    Microsoft Office Excel MUI (Chinese (Simplified)) 2007 

    29)    2007 Microsoft Office Suite Service Pack 2 (SP2) 

    30)    Microsoft Office PowerPoint MUI (Chinese (Simplified)) 2007 

    31)    2007 Microsoft Office Suite Service Pack 2 (SP2) 

    32)    Microsoft Office Publisher MUI (Chinese (Simplified)) 2007 

    33)    2007 Microsoft Office Suite Service Pack 2 (SP2) 

    34)    Microsoft Office Outlook MUI (Chinese (Simplified)) 2007 

    35)    2007 Microsoft Office Suite Service Pack 2 (SP2) 

    36)    Microsoft Office Word MUI (Chinese (Simplified)) 2007 

    37)    2007 Microsoft Office Suite Service Pack 2 (SP2) 

    38)    Microsoft Office Proof (English) 2007 

    39)    2007 Microsoft Office Suite Service Pack 2 (SP2) 

    40)    Microsoft Office Proof (Chinese (Simplified)) 2007 

    41)    2007 Microsoft Office Suite Service Pack 2 (SP2) 

    42)    Microsoft Office IME (Chinese (Simplified)) 2007 

    43)    2007 Microsoft Office Suite Service Pack 2 (SP2) 

    44)    Microsoft Office Proofing (Chinese (Simplified)) 2007 

    45)    Microsoft Office Enterprise 2007 

    46)    2007 Microsoft Office Suite Service Pack 2 (SP2) 

    47)    Microsoft Office InfoPath MUI (Chinese (Simplified)) 2007 

    48)    2007 Microsoft Office Suite Service Pack 2 (SP2) 

    49)    Microsoft Office Shared MUI (English) 2007 

    50)    Microsoft Office Shared MUI (Chinese (Simplified)) 2007 

    51)    2007 Microsoft Office Suite Service Pack 2 (SP2) 

    52)    Microsoft Office OneNote MUI (Chinese (Simplified)) 2007 

    53)    2007 Microsoft Office Suite Service Pack 2 (SP2) 

    54)    Microsoft Office Groove MUI (English) 2007 

    55)    2007 Microsoft Office Suite Service Pack 2 (SP2) 

    56)    Microsoft Office Groove Setup Metadata MUI (Chinese (Simplified)) 2007 

    57)    2007 Microsoft Office Suite Service Pack 2 (SP2) 

    58)    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 

    59)    ThinkPad Bluetooth with Enhanced Data Rate Software 

    60)    Microsoft redistributable runtime DLLs VS2008 SP1(x86) 

    61)    Intel(R) Manageability Engine Firmware Recovery Agent 

    62)    Adobe Acrobat 9 Pro - ChineseS 

    63)    Adobe Acrobat 9 Pro - ChineseS 

    64)    Lenovo Patch Utility 

    65)    NVIDIA 控制面板 311.00 

    66)    NVIDIA 图形驱动程序 311.00 

    67)    NVIDIA Optimus 1.11.3 

    68)    NVIDIA PhysX 系统软件 9.12.1031 

    69)    NVIDIA 更新 1.11.3 

    70)    NVIDIA Install Application 

    71)    NVIDIA Update Components 

    72)    Realtek PCIE Card Reader 

    73)    Microsoft redistributable runtime DLLs VS2005 SP1(x86) 

    74)    Cisco PEAP Module 

    75)    Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 

    76)    Intel(R) Processor Graphics 

    77)    Realtek Ethernet Controller All-In-One Windows Driver 

    78)    Intel(R) SDK for OpenCL - CPU Only Runtime Package 

    79)    互联网虚拟桌面系统 


    2014/05/21 15:25:36.811 [3360:4716] 

    网络连接属性:


    2014/05/21 15:25:36.811 [3360:4716] initial service success
    2014/05/21 15:25:36.816 [3360:4716] CProfileMgrManPlugin::ReceiveMessage: enter
    2014/05/21 15:25:36.816 [3360:4716] ProfileMgrMan: ReceiveMessage with msg id 458753
    2014/05/21 15:25:36.816 [3360:4716] CProfileMgrManPlugin::ReceiveMessage: exit
    2014/05/21 15:25:36.816 [3360:4716] AVMan: Entering ReceiveMessage with msg id 458753
    2014/05/21 15:25:36.816 [3360:4716] AVMan: Disabled event forwarding.
    2014/05/21 15:25:36.816 [3360:4716] AVMan: Leaving ReceiveMessage
    2014/05/21 15:25:36.816 [3360:4716] LUMan: Entering ReceiveMessage with id 0x70001
    2014/05/21 15:25:36.816 [3360:4716] AtpiMan: Entering ReceiveMessage with msg id 458753
    2014/05/21 15:25:36.816 [3360:4716] AtpiMan: Leaving ReceiveMessage
    2014/05/21 15:25:36.816 [3360:4716] BashMan: Entering ReceiveMessage with msg id 458753
    2014/05/21 15:25:36.816 [3360:4716] BashMan: Leaving ReceiveMessage
    2014/05/21 15:25:36.816 [3360:4716] CidsMan: Entering ReceiveMessage with msg id 458753
    2014/05/21 15:25:36.816 [3360:4716] CidsMan: Leaving ReceiveMessage
    2014/05/21 15:25:36.816 [3360:4716] RebootMgrMan: Entering ReceiveMessage with msg id 458753
    2014/05/21 15:25:36.816 [3360:4716] RebootMgrMan: Leaving ReceiveMessage
    2014/05/21 15:25:36.816 [3360:4716] RepMgtMan: Entering ReceiveMessage with msg id 458753
    2014/05/21 15:25:36.816 [3360:4716] RepMgtMan: Leaving ReceiveMessage
    2014/05/21 15:25:36.816 [3360:4716] SubmissionsMan: Entering ReceiveMessage with msg id 458753
    2014/05/21 15:25:36.816 [3360:4716] SubmissionsMan: Leaving ReceiveMessage
    2014/05/21 15:25:36.816 [3360:4716] <CheckUserInformation>: Failed to open ccSettings key UserInformation.                     (Probably because it doesn't exist) Error: 2147483904
    2014/05/21 15:25:36.816 [3360:4716] Starting SMC GUI
    2014/05/21 15:25:36.816 [3360:4716] GetUserAndDomain in smc: Trying to get the User/Domain
    2014/05/21 15:25:36.821 [3360:4716] <SearchSessionExeRunningProcCallback> Process session Id=1, State =0
    2014/05/21 15:25:36.821 [3360:4716] <GetUserAndDomain> The current user's session id=1, Explorer Process Id=1984
    2014/05/21 15:25:36.821 [3360:4716] Enterprise version, Build 4013!!!
    2014/05/21 15:25:36.821 [3360:4716] user_id = DOMAIN/P510018
    2014/05/21 15:25:36.911 [3360:4540] SMCGui - 2820: Creating garbage collection Instance
    2014/05/21 15:25:36.956 [3360:4540] Snac HiTest:0,  0
    2014/05/21 15:25:36.956 [3360:4716] Starting SMC GUI
    2014/05/21 15:25:36.956 [3360:4716] GetUserAndDomain in smc: Trying to get the User/Domain
    2014/05/21 15:25:36.961 [3360:4716] <SearchSessionExeRunningProcCallback> Process session Id=1, State =0
    2014/05/21 15:25:36.961 [3360:4716] <GetUserAndDomain> The current user's session id=1, Explorer Process Id=1984
    2014/05/21 15:25:36.961 [3360:4716] Enterprise version, Build 4013!!!
    2014/05/21 15:25:36.961 [3360:4716] user_id = DOMAIN/P510018
    2014/05/21 15:25:36.966 [3360:4540] SMCGui - 2820: CSmcDlg::Profile() - ImportFromDm() returned...
    2014/05/21 15:25:36.976 [3360:4540] SMCGui - 2820: CSmcDlg::UpdateProfileInfo4067-05/20/2014 09:01:18 424:My Company\鑻忓窞闄?2014/05/21 15:25:37.796 [3360:4540] Saving SMC State
    2014/05/21 15:25:37.796 [3360:4540] chmod on file C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\State\SerState.dat to read/write.
    2014/05/21 15:25:38.076 [3360:3692] <SNAC><LanClient@2874> send reauth request since wait time out!
    2014/05/21 15:25:38.076 [3360:3692] <SNAC><LanClient@7830> send_reauth_request is called.
    2014/05/21 15:25:38.076 [3360:3692] <SNAC><LanClient@850> Send EAPOL start request from other source
    2014/05/21 15:25:38.076 [3360:3692] <SNAC><LanClient@3384> HandleEapolStartRequest entered
    2014/05/21 15:25:38.076 [3360:3692] <SNAC><LanClient@7918> Send EAPOL Start in SendEAPOLStartPacket
    2014/05/21 15:25:38.076 [3360:3692] <SNAC><LanClient@3479> Fail to send eapol start, {65B61454-A312-4BD4-B443-6664C5BB8354}, 1x1 11b/g/n , 1
    2014/05/21 15:25:38.241 [3360:1672] <SyLink>[MakeRegisterData] registration Hardware Key=753197866FBA04DE1AE964494E24B4CD
    2014/05/21 15:25:38.241 [3360:1672] AH: Setting the Browser Session end option & Resetting the URL session ..
    2014/05/21 15:25:38.441 [3360:1672] <ParseHTTPStatusCode:>200=>200 OK
    2014/05/21 15:25:38.441 [3360:1672] <SyLink>[SendRegsitrationRequest] Request Result= 0
    2014/05/21 15:25:38.446 [3360:1672] <SyLink>[mfn_RegSaveResult] Deleted existing server version value
    2014/05/21 15:25:38.446 [3360:1672] <SyLink>[mfn_RegSaveResult] Registration succeed!HostID=15CCB3790A011082017F3D820A3094E2
    2014/05/21 15:25:38.446 [3360:1672] <SyLink>[mfn_RegSaveResult] ComputerID=8FE104690A011082017F3D822CC22F41
    2014/05/21 15:25:38.446 [3360:1672] <SyLink>[mfn_RegSaveResult] Hash Key=6C8EE4ED328CEC181A3CDC037C003596
    2014/05/21 15:25:38.446 [3360:1672] <SyLink>[mfn_RegSaveResult] Server Version=12.1.4023.4080
    2014/05/21 15:25:38.446 [3360:1672] CProfileMgrManPlugin::ReceiveMessage: enter
    2014/05/21 15:25:38.446 [3360:1672] ProfileMgrMan: ReceiveMessage with msg id 262145
    2014/05/21 15:25:38.446 [3360:1672] CProfileMgrManPlugin::ReceiveMessage: exit
    2014/05/21 15:25:38.446 [3360:1672] AVMan: Entering ReceiveMessage with msg id 262145
    2014/05/21 15:25:38.446 [3360:1672] AVMan: Enabled event forwarding.
    2014/05/21 15:25:38.446 [3360:1672] AVMan: Leaving ReceiveMessage
    2014/05/21 15:25:38.446 [3360:1672] LUMan: Entering ReceiveMessage with id 0x40001
    2014/05/21 15:25:38.446 [3360:1672] AtpiMan: Entering ReceiveMessage with msg id 262145
    2014/05/21 15:25:38.446 [3360:1672] AtpiMan: Leaving ReceiveMessage
    2014/05/21 15:25:38.446 [3360:1672] BashMan: Entering ReceiveMessage with msg id 262145
    2014/05/21 15:25:38.446 [3360:1672] BashMan: Leaving ReceiveMessage
    2014/05/21 15:25:38.446 [3360:1672] CidsMan: Entering ReceiveMessage with msg id 262145
    2014/05/21 15:25:38.446 [3360:1672] CidsMan: Leaving ReceiveMessage
    2014/05/21 15:25:38.446 [3360:1672] RebootMgrMan: Entering ReceiveMessage with msg id 262145
    2014/05/21 15:25:38.451 [3360:1672] RebootMgrMan: Leaving ReceiveMessage
    2014/05/21 15:25:38.451 [3360:1672] RepMgtMan: Entering ReceiveMessage with msg id 262145
    2014/05/21 15:25:38.451 [3360:1672] RepMgtMan: Leaving ReceiveMessage
    2014/05/21 15:25:38.451 [3360:1672] SubmissionsMan: Entering ReceiveMessage with msg id 262145
    2014/05/21 15:25:38.451 [3360:1672] SubmissionsMan: Leaving ReceiveMessage
    2014/05/21 15:25:38.801 [3360:4900] Succeed to send the connect status change to TrayIcon
    2014/05/21 15:25:38.806 [3360:4900] The Server IP: 10.1.16.161 Server Name 
    2014/05/21 15:25:38.951 [3360:3692] <SNAC><ComplianceEngine@501> Smc Started = 1
    2014/05/21 15:25:39.761 [3360:2880] <SyLink>Sylink LU thread is started.
    2014/05/21 15:25:42.951 [3360:1672] AH: Setting the Browser Session end option & Resetting the URL session ..
    2014/05/21 15:25:43.051 [3360:1672] <ParseHTTPStatusCode:>200=>200 OK
    2014/05/21 15:25:43.076 [3360:1672] SyLinkEventFunc - EVENT_LU_REQUIRE_STATUS: Calling QueryContentSeqData with Moniker: {1AD331AC-DEF8-4f6f-A7B5-7B259423BBCF} Target Sequence: 130814001
    2014/05/21 15:25:43.076 [3360:1672] SyLinkEventFunc - EVENT_LU_REQUIRE_STATUS: QueryContentSeqData returned CMC_CONTENTUPDATE_CONTENT_CALLBACK_NULL(536936459)
    2014/05/21 15:25:43.076 [3360:1672] LUMan: Entering ReceiveMessage with id 0x6860009
    2014/05/21 15:25:43.076 [3360:1672] LUMan: Entering RegisterHICallbacks
    2014/05/21 15:25:43.076 [3360:1672] LUMan: RegisterHICallbacks() - Registered internal content channel callbacks for {1AD331AC-DEF8-4f6f-A7B5-7B259423BBCF}
    2014/05/21 15:25:43.076 [3360:1672] LuMan: Entering QueryContentSeqData: {1AD331AC-DEF8-4f6f-A7B5-7B259423BBCF}, 130814001
    2014/05/21 15:25:44.236 [3360:1028] HI: call m_pDefUtils->LockNewestDefs
    2014/05/21 15:25:44.266 [3360:1028] HI: LockNewestDefs() failed --> DU result is 77
    2014/05/21 15:25:44.266 [3360:1028] HI: Script reader set default path to 
    2014/05/21 15:25:44.266 [3360:1028] HI: Register SSHelper. File: C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\Definitions\HIDefs\20130814.001\SSHelper.dll
    2014/05/21 15:25:44.281 [3360:1028] HI: new SSHelper has been registered.
    2014/05/21 15:25:44.281 [3360:1028] HI: set default path C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\Definitions\HIDefs\20130814.001
    2014/05/21 15:25:44.281 [3360:1028] HI: Script reader set default path to C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\Definitions\HIDefs\20130814.001\
    2014/05/21 15:25:44.286 [3360:1028] HI: Unexpected m_pLibData is NULL
    2014/05/21 15:25:44.286 [3360:1028] HI: Current SysLangID is 2052
    2014/05/21 15:25:44.286 [3360:1028] HI: Using I18N file C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\Definitions\HIDefs\20130814.001\hilib_zh_CN.xml
    2014/05/21 15:25:44.286 [3360:1028] HI: Set encrypt HI Result to HI Script successfully, HI Result will be saved in encrypted registry value!
    2014/05/21 15:25:44.286 [3360:1028] HI: m_szHIContentDir is C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\Definitions\HIDefs\20130814.001
    2014/05/21 15:25:44.286 [3360:1028] HI: HI Content Sequence Number is: 130814001
    2014/05/21 15:25:44.286 [3360:1028] HI: Script reader set default path to C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.4013.4013.105\Data\Definitions\HIDefs\20130814.001\
    2014/05/21 15:25:44.286 [3360:1028] HI: HI Content full verion is: 12.1.400.002
    2014/05/21 15:25:44.286 [3360:1028] HI: HI Content verion is: 12.1.400.2
    2014/05/21 15:25:44.286 [3360:1028] HI: Disable the timer trigger for the first time after start.

    please help ,thanks 。



  • 2.  RE: SEP12.1 RU4 firewall canot work

    Posted May 21, 2014 12:17 PM

    Have you tried a repair or re-install?

    Was this an upgrade or fresh install?

    What OS?



  • 3.  RE: SEP12.1 RU4 firewall canot work

    Broadcom Employee
    Posted May 21, 2014 03:10 PM

    Hi,

    Could  you repair the SEPM?

    Create a new firewall policy and verify.



  • 4.  RE: SEP12.1 RU4 firewall canot work

    Posted May 21, 2014 09:05 PM
    yes try re-install ,the client update before 11.7 SEP is fine , the system is win 7


  • 5.  RE: SEP12.1 RU4 firewall canot work

    Posted May 21, 2014 09:10 PM
    yes ,your mean create a single policy for the client?


  • 6.  RE: SEP12.1 RU4 firewall canot work

    Posted May 21, 2014 09:45 PM

    Try re-creating and assigning a new fw policy



  • 7.  RE: SEP12.1 RU4 firewall canot work

    Broadcom Employee
    Posted May 22, 2014 06:52 AM

    If only one client is affected in the group then reinstall SEP client on that machine.

    If many clients are affected then create a new group and assign a new policy also.