Endpoint Protection

 View Only

  • 1.  SEPM 11.0 issue, Liveupdate work but cannot push to all client

    Posted Oct 16, 2013 05:04 AM

    Hello,

    This is my first post  ^^

    I have issue with SEPM, it cannot push latest definition to all client ( just 150 users).

    I found the same issue in this forum , I follow as the instruction from many post here but cannot solve my problem.

    Finally I did,

    1. Follow  SEP 11.0 disaster recovery document, Create New SEPM server  (OS windows 2003 std sp3, SEPM Version 11.0.7200.1147)

    2. Restore All client from Database,  (OK)

     all client is back, SEPM can get new definition with Liveupdate but cannot push to all client. I think, something wrong between SEPM and Client.

    I enable sylink log on client and post here for further information .

    Thanks,

    thipsup

     

    10/16 15:54:21 [704] <ScheduleNextUpdate>Manually assigned heartbeat=1 seconds
    10/16 15:54:21 [2504] AH: (InetWaiting) urgent exit event on InetCtrlBlock: 0000000005C199B0
    10/16 15:54:21 [2504] Throw Internet Exception, Error Code=997;AH: failed to send request...
    10/16 15:54:21 [2504] <MaintainPushConnection:>COMPLETED
    10/16 15:54:21 [2504] <ScheduleNextUpdate>new scheduled heartbeat=32 seconds
    10/16 15:54:21 [2504] HEARTBEAT: Check Point 8
    10/16 15:54:21 [2504] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    10/16 15:54:21 [2504] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    10/16 15:54:21 [2504] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 15:54:21 ======
    10/16 15:54:21 [2504] <IndexHeartbeatProc>Set Heartbeat Result= 2
    10/16 15:54:21 [2504] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
    10/16 15:54:21 [2504] Use new configuration
    10/16 15:54:21 [2504] HEARTBEAT: Check Point Complete
    10/16 15:54:21 [2504] <IndexHeartbeatProc>Done, Heartbeat=32seconds
    10/16 15:54:21 [2504] </CSyLink::IndexHeartbeatProc()>
    10/16 15:54:21 [2504] <CheckHeartbeatTimer>====== Heartbeat loop stops at 15:54:21 ======
    10/16 15:54:24 [2500] <CSyLink::mfn_DownloadNow()>
    10/16 15:54:24 [2500] </CSyLink::mfn_DownloadNow()>
    10/16 15:54:53 [2504] <CheckHeartbeatTimer>====== Heartbeat loop starts at 15:54:53 ======
    10/16 15:54:53 [2504] <GetOnlineNicInfo>:Netport Count=2
    10/16 15:54:53 [2504] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="172.20.26.157" Mac="a0-88-b4-44-f8-78" Gateway="172.20.26.1" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.56.1" Mac="08-00-27-00-60-9a" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/></SSANICs>
    10/16 15:54:53 [2504] <CalcAgentHashKey>:CH=40744810AC141A2200837645DABB7E141office-x220prasia.pernod-ricard-asia.com829F3A7D3F6D78E2DAB8F699CD78685D
    10/16 15:54:53 [2504] <CalcAgentHashKey>:CHKey=091F4A27C6FC2968533F8AA0B7CC4B39
    10/16 15:54:53 [2504] <CalcAgentHashKey>:C=40744810AC141A2200837645DABB7E141office-x220prasia.pernod-ricard-asia.com
    10/16 15:54:53 [2504] <CalcAgentHashKey>:CKey=B2AB4C60DB7F2BF1472BEEF1343647B7
    10/16 15:54:53 [2504] <CalcAgentHashKey>:UCH=40744810AC141A2200837645DABB7E140thipsupPRASIA.PERNOD-RICARD-ASIA.COMoffice-x220prasia.pernod-ricard-asia.com829F3A7D3F6D78E2DAB8F699CD78685D
    10/16 15:54:53 [2504] <CalcAgentHashKey>:UCHKey=31ABAF939EC975F43BD6D5E0EDC3D6C0
    10/16 15:54:53 [2504] <CalcAgentHashKey>:UC=40744810AC141A2200837645DABB7E140thipsupPRASIA.PERNOD-RICARD-ASIA.COMoffice-x220prasia.pernod-ricard-asia.com
    10/16 15:54:53 [2504] <CalcAgentHashKey>:UCKey=C507A9852714CA9BA7573EA7759A128D
    10/16 15:54:53 [2504] <DoHeartbeat>HardwareID=829F3A7D3F6D78E2DAB8F699CD78685D
    10/16 15:54:53 [2504] <DoHeartbeat>CHKey=091F4A27C6FC2968533F8AA0B7CC4B39
    10/16 15:54:53 [2504] <DoHeartbeat>CKey=B2AB4C60DB7F2BF1472BEEF1343647B7
    10/16 15:54:53 [2504] <DoHeartbeat>UCHKey=31ABAF939EC975F43BD6D5E0EDC3D6C0
    10/16 15:54:53 [2504] <DoHeartbeat>UCKey=C507A9852714CA9BA7573EA7759A128D
    10/16 15:54:53 [2504] <DoHeartbeat> Set heartbeat event
    10/16 15:54:53 [2504] Use new configuration
    10/16 15:54:53 [2504] <CSyLink::IndexHeartbeatProc()>
    10/16 15:54:53 [2504] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 0000000004AB0080
    10/16 15:54:53 [2504] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 15:54:53 ======
    10/16 15:54:54 [2504] HEARTBEAT: Check Point 1
    10/16 15:54:54 [2504] Get First Server!
    10/16 15:54:54 [2504] HEARTBEAT: Check Point 2
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    10/16 15:54:54 [2504] HEARTBEAT: Check Point 3
    10/16 15:54:54 [2504] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
    10/16 15:54:54 [2504] HEARTBEAT: Check Point 4
    10/16 15:54:54 [2504] <IndexHeartbeatProc>===Get Index STAGE===
    10/16 15:54:54 [2504] ************CSN=164561
    10/16 15:54:54 [2504] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=21B7F258AC141A22017361E2F9BBF694&chk=091F4A27C6FC2968533F8AA0B7CC4B39&ck=B2AB4C60DB7F2BF1472BEEF1343647B7&uchk=31ABAF939EC975F43BD6D5E0EDC3D6C0&uck=C507A9852714CA9BA7573EA7759A128D&hid=829F3A7D3F6D78E2DAB8F699CD78685D&groupid=40744810AC141A2200837645DABB7E14&mode=0&hbt=300&as=164561&cn=[hex]6F66666963652D78323230&lun=[hex]74686970737570&udn=[hex]5052415349412E5045524E4F442D5249434152442D415349412E434F4D
    10/16 15:54:54 [2504] <GetIndexFileRequest:>http://172.20.26.34:8014/secars/secars.dll?h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
    10/16 15:54:54 [2504] 15:54:54=>Send HTTP REQUEST
    10/16 15:54:54 [2504] 15:54:54=>HTTP REQUEST sent
    10/16 15:54:54 [2504] <GetIndexFileRequest:>SMS return=200
    10/16 15:54:54 [2504] <ParseHTTPStatusCode:>200=>200 OK
    10/16 15:54:54 [2504] <FindHeader>Sem-HashKey:=>091F4A27C6FC2968533F8AA0B7CC4B39
    10/16 15:54:54 [2504] <GetIndexFileRequest:>Loading the current mode:1
    10/16 15:54:54 [2504] <FindHeader>Sem-LANSensor:=>0
    10/16 15:54:54 [2504] <FindHeader>Sem-Signatue:=>8AF9BDB117BB27FDB64BB391424118518FB89CF945041FB8693A8CB6677DB2DC55C882E6A3CA8EDE42E224124DD2DA5A6403F123359F699DB601022D0E606591DC36C668B26BDA62672AA269F29FFDD04E86C027D9FD3BF6F2E871DDD085E37E06F147758E09FE90C7F4B9E6D7A9FA22405C4081306676092DCF2D2B5E4FBEEF
    10/16 15:54:54 [2504] <mfn_DoGetIndexFile200>Content Lenght => 1362
    10/16 15:54:54 [2504] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful.. 
    10/16 15:54:54 [2504] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="7EBCF2EFAC141A22016EEAAAD36C6DCB" ServerID="BD65150CAC141A2200D5D980D1A78AB6" GroupID="B8FDE703AC141A22017188A94D739DD8" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "16/10/2013 15:16:02"> <Profile Checksum="A3BC857032E6EA9212C112E2B0F1CD61" SerialNumber="B8FD-10/16/2013 08:15:50 570" LastModifiedTime="16/10/2013  15:16:02"/> <ConfigFile Checksum="43522E58CCD37CA05CAE13005F96D0C0" LastModifiedTime="16/10/2013  14:40:52"/> <IDSFile Checksum="703A0AE1B8EC84B36CDBAECB7E800283" LastModifiedTime="16/10/2013  14:40:52"/> <SylinkFile Checksum="842A09A6A42AA8805D6809637279E970" LastModifiedTime="16/10/2013  15:16:02"/> <LSProfile Checksum="229929894EE97EDA18EFF65E86E01922" SerialNumber ="B8FD-10/16/2013 08:15:50 570" LastModifiedTime ="16/10/2013  15:16:02"/>
    <LiveUpdate>
    <File Checksum="1452DB66D14F1079EA84979472C37CD5" DeltaFlag="1" FullSize="1304024" LastModifiedTime="1381898133076" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="131015001"/>
      <File Checksum="88FA2A2F18E9BF0B2E0D16DE72DB1C72" DeltaFlag="1" FullSize="269170325" LastModifiedTime="1381897844869" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="131015020"/>
      <File Checksum="1DDD3E9B4FB6C70A23111F5C9704FBA0" DeltaFlag="1" FullSize="271013471" LastModifiedTime="1381897100919" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="131015020"/>
      <File Checksum="C2C7C9CFA666C0A90A71F7C5171F7458" DeltaFlag="1" FullSize="1282749" LastModifiedTime="1381896652403" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="131015001"/>
      <File Checksum="82D3810C05AF68882432BC84653E308B" DeltaFlag="1" FullSize="669829" LastModifiedTime="1245429368961" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
      <File Checksum="BE0FEEB76D098D3734BEAFA95B07AB62" DeltaFlag="1" FullSize="88188" LastModifiedTime="1245429584738" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
      <File Checksum="CEBFFA65E7D2F377569B7E456D5BFBE4" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1245429596644" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
      <File Checksum="1B122981D8D66FA9E526B7A81F13DCDB" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1245429624318" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
      <File Checksum="1A04523C4190BE95A4A7710597856246" DeltaFlag="1" FullSize="6473" LastModifiedTime="1291261653125" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="101201096"/>
      <File Checksum="88538D3E4619C1E7272C31CFA2B93D41" DeltaFlag="1" FullSize="886158" LastModifiedTime="1354363904368" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2012111400"/>
      <File Checksum="8757C0716015959C28949D71F0C9A54A" DeltaFlag="1" FullSize="77358" LastModifiedTime="1381898096723" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="131015002"/>
      <File Checksum="79849E4CF0FA0968819FC970C9D78540" DeltaFlag="1" FullSize="12992258" LastModifiedTime="1381898106792" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="131015002"/>
      <File Checksum="557CAE53EA64C5AF7A42DBFDEDF5F67E" DeltaFlag="1" FullSize="12992277" LastModifiedTime="1381898155383" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="131015002"/>
      <File Checksum="A31C27C1BA2844E31F70755BFB771499" DeltaFlag="1" FullSize="77339" LastModifiedTime="1381898164981" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="131015002"/>
    </LiveUpdate>
    </GroupIndex>
    10/16 15:54:54 [2504] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
    10/16 15:54:54 [2504] <GetIndexFileRequest:>COMPLETED
    10/16 15:54:54 [2504] <IndexHeartbeatProc>GetIndexFile handling status: 0
    10/16 15:54:54 [2504] <IndexHeartbeatProc>Switch Server flag=0
    10/16 15:54:54 [2504] HEARTBEAT: Check Point 5.1
    10/16 15:54:54 [2504] <IsInClientIPorOnLink> NextHop is OnLink with 172.20.26.157,return TRUE
    10/16 15:54:54 [2504] <mfn_GetOutIP> Out IP is:172.20.26.157
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
    10/16 15:54:54 [2504] <mfn_LiveUpdate:> Agent returned closest matching seq: 130911001
    10/16 15:54:54 [2504] <Add2LUFileList:>Adding LU Info to LU Download File List: {42B17E5E-4E9D-4157-88CB-966FB4985928}131015001
    10/16 15:54:54 [2504] <Add2LUFileList:>File Info already exists, hence updating: {42B17E5E-4E9D-4157-88CB-966FB4985928}131015001
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    10/16 15:54:54 [2504] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Seq:131015020
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
    10/16 15:54:54 [2504] <mfn_LiveUpdate:> Agent returned closest matching seq: 130912001
    10/16 15:54:54 [2504] <Add2LUFileList:>Adding LU Info to LU Download File List: {1CD85198-26C6-4bac-8C72-5D34B025DE35}131015020
    10/16 15:54:54 [2504] <Add2LUFileList:>File Info already exists, hence updating: {1CD85198-26C6-4bac-8C72-5D34B025DE35}131015020
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    10/16 15:54:54 [2504] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq:131015001
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    10/16 15:54:54 [2504] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C13726A9-8DF7-4583-9B39-105B7EBD55E2} Seq:80820001
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
    10/16 15:54:54 [2504] <mfn_LiveUpdate:> Agent returned closest matching seq: 130912002
    10/16 15:54:54 [2504] <Add2LUFileList:>Adding LU Info to LU Download File List: {CC40C428-1830-44ef-B8B2-920A0B761793}131015002
    10/16 15:54:54 [2504] <Add2LUFileList:>File Info already exists, hence updating: {CC40C428-1830-44ef-B8B2-920A0B761793}131015002
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    10/16 15:54:54 [2504] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Seq:131015002
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
    10/16 15:54:54 [2504] <mfn_LiveUpdate:> Agent returned closest matching seq: 130912002
    10/16 15:54:54 [2504] <Add2LUFileList:>Adding LU Info to LU Download File List: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}131015002
    10/16 15:54:54 [2504] <Add2LUFileList:>File Info already exists, hence updating: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}131015002
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    10/16 15:54:54 [2504] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Seq:131015002
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_SERVER_ONLINE
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
    10/16 15:54:54 [2504] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=300 seconds
    10/16 15:54:54 [2504] HEARTBEAT: Check Point 6
    10/16 15:54:54 [2504] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
    10/16 15:54:54 [2504] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: GUP
    10/16 15:54:54 [2504] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
    10/16 15:54:54 [2504] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
    10/16 15:54:54 [2504] ReasonDescForFailure*** = Host Integrity check is disabled.
    10/16 15:54:54 [2504] ReasonDescForFailure*** = Host Integrity check is disabled.
    10/16 15:54:54 [2504] *** = <SSAInfo NameSpace="rpc" AgentID="21B7F258AC141A22017361E2F9BBF694" ComputerID="23371EADAC141A22017361E248B3E5C2" HardwareKey="829F3A7D3F6D78E2DAB8F699CD78685D" GroupID="B8FDE703AC141A22017188A94D739DD8">
    <AgentHIInfo Status="3" ReasonCode="105" ReasonDescForFailure="Host Integrity check is disabled."/>
    <SSAHostInfo>
    <NetworkIdentity UserDomain="PRASIA.PERNOD-RICARD-ASIA.COM" LogonUser="thipsup" HostDomain="prasia.pernod-ricard-asia.com" HostName="office-x220" HostDesc=""/>
    <SSAProduct Version="11.0.7200.1147"/>
    <SSAOS Version="6.1.7601" Desc="Windows 7 Professional Edition" Type="17170690" ServicePack="Service Pack 1" OsBitType="x64" Language="9"/>
    <Processor ProcessorType="Intel64 Family 6 Model 42 Stepping 7" ProcessorClock="2591" ProcessorNum="4"/>
    <Memory Size="8471691264"/>
    <Disk Letter="C:\" Size="275861495808"/>
    <BIOS Version="LENOVO - 1120"/>
    <TpmDevice Id="3"/>
    <SSAProfile Version="5.0.0" SerialNumber="B8FD-10/16/2013 08:15:50 570"/>
    <SSAIDS Version="" SerialNumber=""/>
    <Deuce Signature="130911001"/>
    <SSAUTC Bias="-420"/>
    <DNSs><DNS Address="172.20.26.26"/><DNS Address="172.20.36.27"/></DNSs>
    <WINSs><WINS Address="172.20.36.27"/><WINS Address="172.20.36.23"/></WINSs>
    <DHCPServer Address="172.20.26.27"/><SSANICs><SSANIC Ip="172.20.26.157" Mac="a0-88-b4-44-f8-78" Gateway="172.20.26.1" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.56.1" Mac="08-00-27-00-60-9a" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
    </SSAHostInfo>
    <RebootRequired Status="0"></RebootRequired>
    <InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
    </SSAInfo>
     
    10/16 15:54:54 [2504] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 296
    10/16 15:54:54 [2504] <mfn_PostAgentInfo>Free memory difference: 366014464, Threshold: 735117300
    10/16 15:54:54 [2504] <mfn_PostAgentInfo>Free disk space difference: 37347328, Threshold: 14956656225
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
    10/16 15:54:54 [2504] <IndexHeartbeatProc>===UPLOAD STAGE===
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
    10/16 15:54:54 [2504] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
    10/16 15:54:54 [2504] <PrepareEventLog>initialized technology extension processing ok
    10/16 15:54:54 [2504] <CalcEventLogIndex>Need to send Event Log Type(0) from id 454 to 454
    10/16 15:54:54 [2504] <PrepareEventLog>Allow total logs to send=1
    10/16 15:54:54 [2504] <PrepareEventLog>nSecurityRecordsTotal=0
    10/16 15:54:54 [2504] <PrepareEventLog>nSecurityRecordsToSend=0
    10/16 15:54:54 [2504] <PrepareEventLog>nSystemRecordsTotal=1
    10/16 15:54:54 [2504] <PrepareEventLog>nSystemRecordsToSend=100
    10/16 15:54:54 [2504] <PrepareEventLog>nTrafficRecordsTotal=0
    10/16 15:54:54 [2504] <PrepareEventLog>nTrafficRecordsToSend=0
    10/16 15:54:54 [2504] <PrepareEventLog>nRawRecordsTotal=0
    10/16 15:54:54 [2504] <PrepareEventLog>nRawRecordsToSend=0
    10/16 15:54:54 [2504] <PrepareEventLog>nProcessRecordsTotal=0
    10/16 15:54:54 [2504] <PrepareEventLog>nProcessRecordsToSend=0
    10/16 15:54:54 [2504] <PrepareEventLog>nLANSensorRecordsTotal=0
    10/16 15:54:54 [2504] <PrepareEventLog>nLANSensorRecordsToSend=0
    10/16 15:54:54 [2504] <PrepareEventLog>nTechExtensionRecordsTotal=0
    10/16 15:54:54 [2504] <PrepareEventLog>nTechExtensionRecordsToSend=0
    10/16 15:54:54 [2504] <MakeSystemLog>The size of SYSTEM event logs is 409.
    10/16 15:54:54 [2504] <SyLink>The size of SYSTEM event logs is 409.
    10/16 15:54:54 [2504] <MakeSecurityLog>Attached total 0 bytes SECURITY event logs.
    10/16 15:54:54 [2504] <MakeTrafficLog>Attached total 0 bytes TRAFFIC event logs.
    10/16 15:54:54 [2504] <MakeRawTrafficLog>Attached total 0 bytes RAW TRAFFIC event logs.
    10/16 15:54:54 [2504] <MakeProcessLog>Attached total 0 bytes process event logs.
    10/16 15:54:54 [2504] <IndexHeartbeatProc>===COMPRESS EVENT LOG STAGE===
    10/16 15:54:54 [2504] <IndexHeartbeatProc>===SEND EVENT LOG STAGE===
    10/16 15:54:54 [2504] ************CSN=164562
    10/16 15:54:54 [2504] <mfn_MakePostUrl:>Request is: action=195&hostid=21B7F258AC141A22017361E2F9BBF694&chk=091F4A27C6FC2968533F8AA0B7CC4B39&ck=B2AB4C60DB7F2BF1472BEEF1343647B7&uchk=31ABAF939EC975F43BD6D5E0EDC3D6C0&uck=C507A9852714CA9BA7573EA7759A128D&groupid=40744810AC141A2200837645DABB7E14&as=164562&cn=[hex]6F66666963652D78323230&lun=[hex]74686970737570&udn=[hex]5052415349412E5045524E4F442D5249434152442D415349412E434F4D
    10/16 15:54:54 [2504] <SendEventLogToServer>http://172.20.26.34:8014/secars/secars.dll?h=F529E7EF50B12319F030D665996F75E69A39DE0C55AB1D26421BBC9659E7B7A99B47BCD3BB02A1A5E59C10EAC3ECD09661F91A66D7BC52A1C1AF50CB127D835EB8445B0D5C978F264CB1AA57B2BFE3F0980386419420F0E82F300B37E1E87F76871D38F11238FF076ABA9B9804CEF66D7E56C8104216AAD5E9CEDF2A7BB284C9DD14A6F013B385D3E54ED7585563C088B971379157F0D058CC7FF29338B5F2E9B8F60095E9CFC26090939FBFE746D7A85E64196D917B08E27BD92DCB2B654F535A3D44503D518410DFBF87DFB2288FF14F819EC93D0B763AE0291E94B00D29F8A0056A3FDCEC25FFD0BC246A8D5CC4CF9F736100C9A383E6FCC732E908B42DC3AD572AD9FB0D119826B11C48F13CCB43D7191D0B2EAC9F90C1EEA4835A269EE42B6E0A1F25F209D90451436081583B4F024682C510F136E92062E6F72CA71450C1B82982DC44549C15D86AB014D14C655D941A9E45B4D257475DAA44B5E15148FD449CD76A60C3C18589285023C3273BC7A50C62D00D3102C155B346332B082F
    10/16 15:54:54 [2504] <SendEventLogToServer>eventlog-->SMS, size=358
    10/16 15:54:54 [2504] <SendEventLogToServer>uploads the eventlog to server, size=358
    10/16 15:54:54 [2504] <SendEventLogToServer>Query return code = 200
    10/16 15:54:54 [2504] <SendEventLogToServer>EventLog-->SEM DONE!
    10/16 15:54:54 [2504] <PostEvent>going to post event=EVENT_SERVER_EVENT_LOG_SENT
    10/16 15:54:54 [2504] <PostEvent>done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0
    10/16 15:54:54 [2504] <IndexHeartbeatProc>Communication Mode=0(Push Mode)
    10/16 15:54:54 [2504] <IndexHeartbeatProc>Enter Push Session
    10/16 15:54:54 [2504] <IndexHeartbeatProc>Setting the session timeout on Profile Session (for MaintainPushConnection) to 320000
    10/16 15:54:54 [2504] <MaintainPushConnection:>Push Connecton!
    10/16 15:54:55 [2504] ************CSN=164563
    10/16 15:54:55 [2504] <mfn_MakeGetPushUrl:>Request is: action=128&hostid=21B7F258AC141A22017361E2F9BBF694&chk=091F4A27C6FC2968533F8AA0B7CC4B39&ck=B2AB4C60DB7F2BF1472BEEF1343647B7&uchk=31ABAF939EC975F43BD6D5E0EDC3D6C0&uck=C507A9852714CA9BA7573EA7759A128D&groupid=40744810AC141A2200837645DABB7E14&mode=0&as=164563
    10/16 15:54:55 [2504] <MaintainPushConnection:>http://172.20.26.34:8014/secars/secars.dll?h=96E08128C905EBF2BED7438ECEAF3B159A39DE0C55AB1D26421BBC9659E7B7A99B47BCD3BB02A1A5E59C10EAC3ECD09661F91A66D7BC52A1C1AF50CB127D835EB8445B0D5C978F264CB1AA57B2BFE3F0980386419420F0E82F300B37E1E87F76871D38F11238FF076ABA9B9804CEF66D7E56C8104216AAD5E9CEDF2A7BB284C9DD14A6F013B385D3E54ED7585563C088B971379157F0D058CC7FF29338B5F2E9B8F60095E9CFC26090939FBFE746D7A85E64196D917B08E27BD92DCB2B654F535A3D44503D518410DFBF87DFB2288FF14F819EC93D0B763AE0291E94B00D29F8A0056A3FDCEC25FFD0BC246A8D5CC4CF38F741D46CC414393F9397ADB5BC6CEC3EF80F8613A1CC5A3FDC90790F472AAC
    10/16 15:55:27 [2500] <CSyLink::mfn_DownloadNow()>
    10/16 15:55:27 [2500] </CSyLink::mfn_DownloadNow()>
    10/16 15:56:30 [2500] <CSyLink::mfn_DownloadNow()>
    10/16 15:56:30 [2500] </CSyLink::mfn_DownloadNow()>
    10/16 15:57:33 [2500] <CSyLink::mfn_DownloadNow()>
    10/16 15:57:33 [2500] </CSyLink::mfn_DownloadNow()>
    10/16 15:58:00 [2508] </CExpBackoff::Wait()>
    10/16 15:58:00 [2508] </CSyLink::LUThreadProc()>
    10/16 15:58:00 [2508] <IsLUTempFileValid:> File: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF{42B17E5E-4E9D-4157-88CB-966FB4985928}1310150011309110017.TMP is currently used
    10/16 15:58:36 [2500] <CSyLink::mfn_DownloadNow()>
    10/16 15:58:36 [2500] </CSyLink::mfn_DownloadNow()>
    10/16 15:59:00 [2508] <CSyLink::LUThreadProc()>
    10/16 15:59:00 [2508] SyLinkDeleteConfig => Deleting instance: 0000000003E56AE0
    10/16 15:59:00 [2508] SyLinkCreateConfig => Created instance: 0000000003E56AE0
    10/16 15:59:00 [2508] Importing ConfigObject: 0000000004AB0080 into: 0000000003E56AE0
    10/16 15:59:00 [2508] <LUThreadProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 0000000003E56AE0
    10/16 15:59:00 [2508] <CRandomDelay::CRandomDelay()>
    10/16 15:59:00 [2508] Random delay window: 0hour 5min 0sec 
    10/16 15:59:00 [2508] Computed random delay:0hour 1min 10sec 0millisec
    10/16 15:59:00 [2508] </CRandomDelay::CRandomDelay()>
    10/16 15:59:00 [2508] <LUThreadProc>Waiting for: 70000 milliseconds to start downloading LU contents
    10/16 15:59:39 [2500] <CSyLink::mfn_DownloadNow()>
    10/16 15:59:39 [2500] </CSyLink::mfn_DownloadNow()>
    10/16 16:00:10 [2508] <LUThreadProc>Starting LU download.
    10/16 16:00:10 [2508] SyLinkCreateConfig => Created instance: 0000000000618EB0
    10/16 16:00:10 [2508] Importing ConfigObject: 0000000004AB0080 into: 0000000000618EB0
    10/16 16:00:10 [2508] <UpdateGUPList>Setting the session timeout on GlobalItemsSession to 2 min.
    10/16 16:00:10 [2508] ************CSN=164564
    10/16 16:00:10 [2508] <MakeGetGlobalIndexUrl:>Request is: action=310&hostid=21B7F258AC141A22017361E2F9BBF694&chk=091F4A27C6FC2968533F8AA0B7CC4B39&ck=B2AB4C60DB7F2BF1472BEEF1343647B7&uchk=31ABAF939EC975F43BD6D5E0EDC3D6C0&uck=C507A9852714CA9BA7573EA7759A128D&groupid=40744810AC141A2200837645DABB7E14&as=164564&cn=[hex]6F66666963652D78323230&lun=[hex]74686970737570&udn=[hex]5052415349412E5045524E4F442D5249434152442D415349412E434F4D
    10/16 16:00:10 [2508] <GetGlobalIndex:>http://172.20.26.34:8014/secars/secars.dll?h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
    10/16 16:00:10 [2508] 16:0:10=>Send HTTP REQUEST
    10/16 16:00:10 [2508] 16:0:10=>HTTP REQUEST sent
    10/16 16:00:10 [2508] <GetGlobalIndex:>SMS return=200
    10/16 16:00:10 [2508] <ParseHTTPStatusCode:>200=>200 OK
    10/16 16:00:10 [2508] <FindHeader>Sem-Signatue:=>366847B122BE8D00DDB038E9EA61A674C51F8F0ACD69904DF3C2C7D8DD6566A854C8DC2CCD8A4BA28B516266B4DC9B7A87E01A9BDBD3575E8B3E1B50B3135CBCE776F1D873FBA1EAA25DD549C0189212EC6ED0996AF6B7443F3BF8B08A2C27F1DB07A80ACFF2E31E8B3628DB40FC4B9D8FA0BDD6A09810077B697FE242F47EDB
    10/16 16:00:10 [2508] <DoGetGlobalIndex200>Content Lenght => 196
    10/16 16:00:10 [2508] <DoGetGlobalIndex200>Got Global Index from server, read bytes=196
    10/16 16:00:10 [2508] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful.. 
    10/16 16:00:10 [2508] <ParseGlobalIndexFile>the current GlobalList's checksum is 5F02996147A94456447E07718AAE740D
    10/16 16:00:10 [2508] <ParseGlobalIndexFile>the last GlobalList's checksum is 5F02996147A94456447E07718AAE740D
    10/16 16:00:10 [2508] <DoGetGlobalIndex200>completed
    10/16 16:00:10 [2508] <GetGlobalIndex:>RECEIVE STAGE COMPLETED
    10/16 16:00:10 [2508] <GetGlobalIndex:>COMPLETED
    10/16 16:00:10 [2508] <UpdateGUPList>the return value of GetGlobalIndex is 121
    10/16 16:00:10 [2508] SyLinkDeleteConfig => Deleting instance: 0000000000618EB0
    10/16 16:00:10 [2508] <LUThreadProc> Sufficient disk space available on C:\ to download content {42B17E5E-4E9D-4157-88CB-966FB4985928} 131015001
    10/16 16:00:10 [2508] <LUThreadProc>GUP to be used172.20.26.34
    10/16 16:00:10 [2508] <SetupTempLUFilePath:>NEW download: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF{42B17E5E-4E9D-4157-88CB-966FB4985928}1310150011309110017.TMP
    10/16 16:00:10 [2508] <LUThreadProc>SetConnectionInfo:172.20.26.34:2967
    10/16 16:00:10 [2508] <CHttpFileDownload::CHttpFileDownload()>
    10/16 16:00:10 [2508] </CHttpFileDownload::CHttpFileDownload()>
    10/16 16:00:10 [2508] <CHttpFileDownload::Do()>
    10/16 16:00:10 [2508] <CHttpFileDownload::getRemainingBytesToDownload()>
    10/16 16:00:10 [2508] Remaining bytes to download: 1082806
    10/16 16:00:10 [2508] </CHttpFileDownload::getRemainingBytesToDownload()>
    10/16 16:00:10 [2508] <CHttpConnector::SendRequest()>
    10/16 16:00:12 [2508] SendRequest() failed.
    10/16 16:00:12 [2508] </CHttpConnector::SendRequest()>
    10/16 16:00:12 [2508] </CHttpFileDownload::Do()>
    10/16 16:00:12 [2508] <LUDownloader::GetContentToFile> completed. 
    10/16 16:00:12 [2508] <CHttpFileDownload::~CHttpFileDownload()>
    10/16 16:00:13 [2508] </CHttpFileDownload::~CHttpFileDownload()>
    10/16 16:00:13 [2508] <LUThreadProc>to download from GUP with appointed SEPM172.20.26.34
    10/16 16:00:13 [2508] <LUThreadProc>LU file download failed due to HTTP error:0
    10/16 16:00:13 [2508] <LUThreadProc> Sufficient disk space available on C:\ to download content {1CD85198-26C6-4bac-8C72-5D34B025DE35} 131015020
    10/16 16:00:13 [2508] <LUThreadProc>no GUP can be retrieved
    10/16 16:00:13 [2508] <LUThreadProc>Has iterated to the end of GUP list, should reset to come from its header now,1is (are) reset
    10/16 16:00:13 [2508] <CExpBackoff::Increment()>
    10/16 16:00:13 [2508] Backoff wait index: 7
    10/16 16:00:13 [2508] </CExpBackoff::Increment()>
    10/16 16:00:13 [2508] <CExpBackoff::Wait()>
    10/16 16:00:13 [2508] CExpBackoff wait time in seconds: 2048
    10/16 16:00:16 [2504] AH: (InetWaiting) time out. Timeout period: 320000
    10/16 16:00:16 [2504] Throw Internet Exception, Error Code=4294967287;Internet Session Timeout
    10/16 16:00:16 [2504] <MaintainPushConnection:>COMPLETED
    10/16 16:00:16 [2504] <ScheduleNextUpdate>Manually assigned heartbeat=5 seconds
    10/16 16:00:16 [2504] HEARTBEAT: Check Point 8
    10/16 16:00:16 [2504] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    10/16 16:00:16 [2504] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    10/16 16:00:16 [2504] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 16:00:16 ======
    10/16 16:00:16 [2504] <IndexHeartbeatProc>Set Heartbeat Result= 2
    10/16 16:00:16 [2504] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
    10/16 16:00:16 [2504] Use new configuration
    10/16 16:00:16 [2504] HEARTBEAT: Check Point Complete
    10/16 16:00:16 [2504] <IndexHeartbeatProc>Done, Heartbeat=5seconds
    10/16 16:00:16 [2504] </CSyLink::IndexHeartbeatProc()>
    10/16 16:00:16 [2504] <CheckHeartbeatTimer>====== Heartbeat loop stops at 16:00:16 ======
    10/16 16:00:21 [2504] <CheckHeartbeatTimer>====== Heartbeat loop starts at 16:00:21 ======
    10/16 16:00:21 [2504] <GetOnlineNicInfo>:Netport Count=2
    10/16 16:00:21 [2504] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="172.20.26.157" Mac="a0-88-b4-44-f8-78" Gateway="172.20.26.1" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.56.1" Mac="08-00-27-00-60-9a" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/></SSANICs>
    10/16 16:00:21 [2504] <CalcAgentHashKey>:CH=40744810AC141A2200837645DABB7E141office-x220prasia.pernod-ricard-asia.com829F3A7D3F6D78E2DAB8F699CD78685D
    10/16 16:00:21 [2504] <CalcAgentHashKey>:CHKey=091F4A27C6FC2968533F8AA0B7CC4B39
    10/16 16:00:21 [2504] <CalcAgentHashKey>:C=40744810AC141A2200837645DABB7E141office-x220prasia.pernod-ricard-asia.com
    10/16 16:00:21 [2504] <CalcAgentHashKey>:CKey=B2AB4C60DB7F2BF1472BEEF1343647B7
    10/16 16:00:21 [2504] <CalcAgentHashKey>:UCH=40744810AC141A2200837645DABB7E140thipsupPRASIA.PERNOD-RICARD-ASIA.COMoffice-x220prasia.pernod-ricard-asia.com829F3A7D3F6D78E2DAB8F699CD78685D
    10/16 16:00:21 [2504] <CalcAgentHashKey>:UCHKey=31ABAF939EC975F43BD6D5E0EDC3D6C0
    10/16 16:00:21 [2504] <CalcAgentHashKey>:UC=40744810AC141A2200837645DABB7E140thipsupPRASIA.PERNOD-RICARD-ASIA.COMoffice-x220prasia.pernod-ricard-asia.com
    10/16 16:00:21 [2504] <CalcAgentHashKey>:UCKey=C507A9852714CA9BA7573EA7759A128D
    10/16 16:00:21 [2504] <DoHeartbeat>HardwareID=829F3A7D3F6D78E2DAB8F699CD78685D
    10/16 16:00:21 [2504] <DoHeartbeat>CHKey=091F4A27C6FC2968533F8AA0B7CC4B39
    10/16 16:00:21 [2504] <DoHeartbeat>CKey=B2AB4C60DB7F2BF1472BEEF1343647B7
    10/16 16:00:21 [2504] <DoHeartbeat>UCHKey=31ABAF939EC975F43BD6D5E0EDC3D6C0
    10/16 16:00:21 [2504] <DoHeartbeat>UCKey=C507A9852714CA9BA7573EA7759A128D
    10/16 16:00:21 [2504] <DoHeartbeat> Set heartbeat event
    10/16 16:00:21 [2504] Use new configuration
    10/16 16:00:21 [2504] <CSyLink::IndexHeartbeatProc()>
    10/16 16:00:21 [2504] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 0000000004AB0080
    10/16 16:00:21 [2504] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 16:00:21 ======
    10/16 16:00:22 [2504] HEARTBEAT: Check Point 1
    10/16 16:00:22 [2504] Get First Server!
    10/16 16:00:22 [2504] HEARTBEAT: Check Point 2
    10/16 16:00:22 [2504] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    10/16 16:00:22 [2504] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    10/16 16:00:22 [2504] HEARTBEAT: Check Point 3
    10/16 16:00:22 [2504] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
    10/16 16:00:22 [2504] HEARTBEAT: Check Point 4
    10/16 16:00:22 [2504] <IndexHeartbeatProc>===Get Index STAGE===
    10/16 16:00:22 [2504] ************CSN=164565
    10/16 16:00:22 [2504] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=21B7F258AC141A22017361E2F9BBF694&chk=091F4A27C6FC2968533F8AA0B7CC4B39&ck=B2AB4C60DB7F2BF1472BEEF1343647B7&uchk=31ABAF939EC975F43BD6D5E0EDC3D6C0&uck=C507A9852714CA9BA7573EA7759A128D&hid=829F3A7D3F6D78E2DAB8F699CD78685D&groupid=40744810AC141A2200837645DABB7E14&mode=0&hbt=300&as=164565&cn=[hex]6F66666963652D78323230&lun=[hex]74686970737570&udn=[hex]5052415349412E5045524E4F442D5249434152442D415349412E434F4D
    10/16 16:00:22 [2504] <GetIndexFileRequest:>http://172.20.26.34:8014/secars/secars.dll?h=9290929F11EC20C59EB20718F287D322C9CDD0D83C16A19229BA6F91BA72559D96B7BB683D0089EFD7A3D362C5195CF26392135CED55FB03C416B0947B1CCF600AE6B5C6D252844A0AAE39018C754670CF06D436E23468183E279EA4D70728DE5ADA3EDABF0FEE587BE1A014C5C713CAC506A477338134F023A09AAEE324D2895F3BFF914E20E61532315F9BFBC6DC483175215E9203C879325A3CFA5938554BFD4D1A2C10A9EF41972AF6E0CC10153368A08E51C81F210FC621D5E5883FA8C9C7FE4249EE01F6F85A47576BDA4E8EDDB01332CB948AC99A663D4BA403DF884A0878AB688101FC01E9E4C872B102343AFF7CB914A8CC4D002E73C12BF52BD22641AD8C82CBD55EE2A7EFFF19920A46D9ACEA467A344A2347A442BB9A282307FDF4C7515B464B518BA2DB4296742C78DF6C18927B8E70767CC8CCEB2C83697487C45237EDF296968D5BF9886EE908261C0FCD69B05D3882B0A0F0766C5F593399BDEFD1EFD12D23FD6492053BC7D0648EC83F0A6655C8FA066C89FF4E4FEE26F7E49B9A1D34B1A434F1F829CFB6E5364B9D96CE4BC64CBA1551E350873EFBB19320FD1E6079F3A915D33CD674B132CF71
    10/16 16:00:22 [2504] 16:0:22=>Send HTTP REQUEST
    10/16 16:00:22 [2504] 16:0:22=>HTTP REQUEST sent
    10/16 16:00:22 [2504] <GetIndexFileRequest:>SMS return=200
    10/16 16:00:22 [2504] <ParseHTTPStatusCode:>200=>200 OK
    10/16 16:00:22 [2504] <FindHeader>Sem-HashKey:=>091F4A27C6FC2968533F8AA0B7CC4B39
    10/16 16:00:22 [2504] <GetIndexFileRequest:>Loading the current mode:1
    10/16 16:00:22 [2504] <FindHeader>Sem-LANSensor:=>0
    10/16 16:00:22 [2504] <FindHeader>Sem-Signatue:=>8AF9BDB117BB27FDB64BB391424118518FB89CF945041FB8693A8CB6677DB2DC55C882E6A3CA8EDE42E224124DD2DA5A6403F123359F699DB601022D0E606591DC36C668B26BDA62672AA269F29FFDD04E86C027D9FD3BF6F2E871DDD085E37E06F147758E09FE90C7F4B9E6D7A9FA22405C4081306676092DCF2D2B5E4FBEEF
    10/16 16:00:22 [2504] <mfn_DoGetIndexFile200>Content Lenght => 1362
    10/16 16:00:22 [2504] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful.. 
    10/16 16:00:22 [2504] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="7EBCF2EFAC141A22016EEAAAD36C6DCB" ServerID="BD65150CAC141A2200D5D980D1A78AB6" GroupID="B8FDE703AC141A22017188A94D739DD8" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "16/10/2013 15:16:02"> <Profile Checksum="A3BC857032E6EA9212C112E2B0F1CD61" SerialNumber="B8FD-10/16/2013 08:15:50 570" LastModifiedTime="16/10/2013  15:16:02"/> <ConfigFile Checksum="43522E58CCD37CA05CAE13005F96D0C0" LastModifiedTime="16/10/2013  14:40:52"/> <IDSFile Checksum="703A0AE1B8EC84B36CDBAECB7E800283" LastModifiedTime="16/10/2013  14:40:52"/> <SylinkFile Checksum="842A09A6A42AA8805D6809637279E970" LastModifiedTime="16/10/2013  15:16:02"/> <LSProfile Checksum="229929894EE97EDA18EFF65E86E01922" SerialNumber ="B8FD-10/16/2013 08:15:50 570" LastModifiedTime ="16/10/2013  15:16:02"/>
    <LiveUpdate>
    <File Checksum="1452DB66D14F1079EA84979472C37CD5" DeltaFlag="1" FullSize="1304024" LastModifiedTime="1381898133076" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="131015001"/>
      <File Checksum="88FA2A2F18E9BF0B2E0D16DE72DB1C72" DeltaFlag="1" FullSize="269170325" LastModifiedTime="1381897844869" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="131015020"/>
      <File Checksum="1DDD3E9B4FB6C70A23111F5C9704FBA0" DeltaFlag="1" FullSize="271013471" LastModifiedTime="1381897100919" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="131015020"/>
      <File Checksum="C2C7C9CFA666C0A90A71F7C5171F7458" DeltaFlag="1" FullSize="1282749" LastModifiedTime="1381896652403" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="131015001"/>
      <File Checksum="82D3810C05AF68882432BC84653E308B" DeltaFlag="1" FullSize="669829" LastModifiedTime="1245429368961" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
      <File Checksum="BE0FEEB76D098D3734BEAFA95B07AB62" DeltaFlag="1" FullSize="88188" LastModifiedTime="1245429584738" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
      <File Checksum="CEBFFA65E7D2F377569B7E456D5BFBE4" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1245429596644" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
      <File Checksum="1B122981D8D66FA9E526B7A81F13DCDB" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1245429624318" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
      <File Checksum="1A04523C4190BE95A4A7710597856246" DeltaFlag="1" FullSize="6473" LastModifiedTime="1291261653125" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="101201096"/>
      <File Checksum="88538D3E4619C1E7272C31CFA2B93D41" DeltaFlag="1" FullSize="886158" LastModifiedTime="1354363904368" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2012111400"/>
      <File Checksum="8757C0716015959C28949D71F0C9A54A" DeltaFlag="1" FullSize="77358" LastModifiedTime="1381898096723" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="131015002"/>
      <File Checksum="79849E4CF0FA0968819FC970C9D78540" DeltaFlag="1" FullSize="12992258" LastModifiedTime="1381898106792" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="131015002"/>
      <File Checksum="557CAE53EA64C5AF7A42DBFDEDF5F67E" DeltaFlag="1" FullSize="12992277" LastModifiedTime="1381898155383" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="131015002"/>
      <File Checksum="A31C27C1BA2844E31F70755BFB771499" DeltaFlag="1" FullSize="77339" LastModifiedTime="1381898164981" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="131015002"/>
    </LiveUpdate>
    </GroupIndex>
    10/16 16:00:22 [2504] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
    10/16 16:00:22 [2504] <GetIndexFileRequest:>COMPLETED
    10/16 16:00:22 [2504] <IndexHeartbeatProc>GetIndexFile handling status: 0
    10/16 16:00:22 [2504] <IndexHeartbeatProc>Switch Server flag=0
    10/16 16:00:22 [2504] HEARTBEAT: Check Point 5.1
    10/16 16:00:22 [2504] <IsInClientIPorOnLink> NextHop is OnLink with 172.20.26.157,return TRUE
    10/16 16:00:22 [2504] <mfn_GetOutIP> Out IP is:172.20.26.157
    10/16 16:00:22 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 16:00:22 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
    10/16 16:00:22 [2504] <mfn_LiveUpdate:> Agent returned closest matching seq: 130911001
    10/16 16:00:22 [2504] <Add2LUFileList:>Adding LU Info to LU Download File List: {42B17E5E-4E9D-4157-88CB-966FB4985928}131015001
    10/16 16:00:22 [2504] <Add2LUFileList:>File Info already exists, hence updating: {42B17E5E-4E9D-4157-88CB-966FB4985928}131015001
    10/16 16:00:22 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 16:00:22 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    10/16 16:00:22 [2504] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Seq:131015020
    10/16 16:00:22 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 16:00:22 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
    10/16 16:00:22 [2504] <mfn_LiveUpdate:> Agent returned closest matching seq: 130912001
    10/16 16:00:22 [2504] <Add2LUFileList:>Adding LU Info to LU Download File List: {1CD85198-26C6-4bac-8C72-5D34B025DE35}131015020
    10/16 16:00:22 [2504] <Add2LUFileList:>File Info already exists, hence updating: {1CD85198-26C6-4bac-8C72-5D34B025DE35}131015020
    10/16 16:00:22 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 16:00:22 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    10/16 16:00:22 [2504] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq:131015001
    10/16 16:00:22 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 16:00:22 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    10/16 16:00:22 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 16:00:22 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    10/16 16:00:22 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 16:00:22 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    10/16 16:00:22 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 16:00:22 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    10/16 16:00:22 [2504] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C13726A9-8DF7-4583-9B39-105B7EBD55E2} Seq:80820001
    10/16 16:00:22 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 16:00:22 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    10/16 16:00:22 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 16:00:22 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    10/16 16:00:22 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 16:00:22 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
    10/16 16:00:22 [2504] <mfn_LiveUpdate:> Agent returned closest matching seq: 130912002
    10/16 16:00:22 [2504] <Add2LUFileList:>Adding LU Info to LU Download File List: {CC40C428-1830-44ef-B8B2-920A0B761793}131015002
    10/16 16:00:22 [2504] <Add2LUFileList:>File Info already exists, hence updating: {CC40C428-1830-44ef-B8B2-920A0B761793}131015002
    10/16 16:00:22 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 16:00:22 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    10/16 16:00:22 [2504] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Seq:131015002
    10/16 16:00:22 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 16:00:22 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
    10/16 16:00:22 [2504] <mfn_LiveUpdate:> Agent returned closest matching seq: 130912002
    10/16 16:00:22 [2504] <Add2LUFileList:>Adding LU Info to LU Download File List: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}131015002
    10/16 16:00:22 [2504] <Add2LUFileList:>File Info already exists, hence updating: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}131015002
    10/16 16:00:22 [2504] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    10/16 16:00:22 [2504] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    10/16 16:00:22 [2504] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Seq:131015002
    10/16 16:00:22 [2504] <PostEvent>going to post event=EVENT_SERVER_ONLINE
    10/16 16:00:22 [2504] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
    10/16 16:00:22 [2504] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=300 seconds
    10/16 16:00:22 [2504] HEARTBEAT: Check Point 6
    10/16 16:00:22 [2504] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
    10/16 16:00:23 [2504] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: GUP
    10/16 16:00:23 [2504] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
    10/16 16:00:23 [2504] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
    10/16 16:00:23 [2504] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
    10/16 16:00:23 [2504] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
    10/16 16:00:23 [2504] ReasonDescForFailure*** = Host Integrity check is disabled.
    10/16 16:00:23 [2504] ReasonDescForFailure*** = Host Integrity check is disabled.
    10/16 16:00:23 [2504] *** = <SSAInfo NameSpace="rpc" AgentID="21B7F258AC141A22017361E2F9BBF694" ComputerID="23371EADAC141A22017361E248B3E5C2" HardwareKey="829F3A7D3F6D78E2DAB8F699CD78685D" GroupID="B8FDE703AC141A22017188A94D739DD8">
    <AgentHIInfo Status="3" ReasonCode="105" ReasonDescForFailure="Host Integrity check is disabled."/>
    <SSAHostInfo>
    <NetworkIdentity UserDomain="PRASIA.PERNOD-RICARD-ASIA.COM" LogonUser="thipsup" HostDomain="prasia.pernod-ricard-asia.com" HostName="office-x220" HostDesc=""/>
    <SSAProduct Version="11.0.7200.1147"/>
    <SSAOS Version="6.1.7601" Desc="Windows 7 Professional Edition" Type="17170690" ServicePack="Service Pack 1" OsBitType="x64" Language="9"/>
    <Processor ProcessorType="Intel64 Family 6 Model 42 Stepping 7" ProcessorClock="2591" ProcessorNum="4"/>
    <Memory Size="8471691264"/>
    <Disk Letter="C:\" Size="275861495808"/>
    <BIOS Version="LENOVO - 1120"/>
    <TpmDevice Id="3"/>
    <SSAProfile Version="5.0.0" SerialNumber="B8FD-10/16/2013 08:15:50 570"/>
    <SSAIDS Version="" SerialNumber=""/>
    <Deuce Signature="130911001"/>
    <SSAUTC Bias="-420"/>
    <DNSs><DNS Address="172.20.26.26"/><DNS Address="172.20.36.27"/></DNSs>
    <WINSs><WINS Address="172.20.36.27"/><WINS Address="172.20.36.23"/></WINSs>
    <DHCPServer Address="172.20.26.27"/><SSANICs><SSANIC Ip="172.20.26.157" Mac="a0-88-b4-44-f8-78" Gateway="172.20.26.1" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.56.1" Mac="08-00-27-00-60-9a" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
    </SSAHostInfo>
    <RebootRequired Status="0"></RebootRequired>
    <InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
    </SSAInfo>
     
    10/16 16:00:23 [2504] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 329
    10/16 16:00:23 [2504] <mfn_PostAgentInfo>Free memory difference: 347328512, Threshold: 735117300
    10/16 16:00:23 [2504] <mfn_PostAgentInfo>Free disk space difference: 37437440, Threshold: 14956656225
    10/16 16:00:23 [2504] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
    10/16 16:00:23 [2504] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
    10/16 16:00:23 [2504] <IndexHeartbeatProc>===UPLOAD STAGE===
    10/16 16:00:23 [2504] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
    10/16 16:00:23 [2504] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
    10/16 16:00:23 [2504] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
    10/16 16:00:23 [2504] <PrepareEventLog>initialized technology extension processing ok
    10/16 16:00:23 [2504] <PrepareEventLog>Allow total logs to send=0
    10/16 16:00:23 [2504] <IndexHeartbeatProc>Communication Mode=0(Push Mode)
    10/16 16:00:23 [2504] <IndexHeartbeatProc>Enter Push Session
    10/16 16:00:23 [2504] <IndexHeartbeatProc>Setting the session timeout on Profile Session (for MaintainPushConnection) to 320000
    10/16 16:00:23 [2504] <MaintainPushConnection:>Push Connecton!
    10/16 16:00:23 [2504] ************CSN=164566
    10/16 16:00:23 [2504] <mfn_MakeGetPushUrl:>Request is: action=128&hostid=21B7F258AC141A22017361E2F9BBF694&chk=091F4A27C6FC2968533F8AA0B7CC4B39&ck=B2AB4C60DB7F2BF1472BEEF1343647B7&uchk=31ABAF939EC975F43BD6D5E0EDC3D6C0&uck=C507A9852714CA9BA7573EA7759A128D&groupid=40744810AC141A2200837645DABB7E14&mode=0&as=164566
    10/16 16:00:23 [2504] <MaintainPushConnection:>http://172.20.26.34:8014/secars/secars.dll?h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
     

     



  • 2.  RE: SEPM 11.0 issue, Liveupdate work but cannot push to all client

    Posted Oct 16, 2013 05:10 AM

    All the client showing online ?

    Try to replace sylink.xml for one client.

     

    Check this

    Symantec Endpoint Protection Manager 11.x is not updating 32 or 64 bit virus definitions.

     

    Article:TECH104721 | Created: 2008-01-15 | Updated: 2013-05-17 | Article URL http://www.symantec.com/docs/TECH104721

     



  • 3.  RE: SEPM 11.0 issue, Liveupdate work but cannot push to all client

    Posted Oct 16, 2013 05:22 AM

    Client status is online.

    screenshot.879.png

     

    I follow as your link before post here ^^

    that's why I post sylink log as well.

    on this line,

    10/16 16:00:12 [2508] <LUDownloader::GetContentToFile> completed. 
    10/16 16:00:12 [2508] <CHttpFileDownload::~CHttpFileDownload()>
    10/16 16:00:13 [2508] </CHttpFileDownload::~CHttpFileDownload()>
    10/16 16:00:13 [2508] <LUThreadProc>to download from GUP with appointed SEPM172.20.26.34
    10/16 16:00:13 [2508] <LUThreadProc>LU file download failed due to HTTP error:0
    10/16 16:00:13 [2508] <LUThreadProc> Sufficient disk space available on C:\ to download content {1CD85198-26C6-4bac-8C72-5D34B025DE35} 131015020
    10/16 16:00:13 [2508] <LUThreadProc>no GUP can be retrieved
    10/16 16:00:13 [2508] <LUThreadProc>Has iterated to the end of GUP list, should reset to come from its header now,1is (are) reset
     
     
     


  • 4.  RE: SEPM 11.0 issue, Liveupdate work but cannot push to all client

    Posted Oct 16, 2013 05:27 AM

    are the sep client update through GUP ?

    Check this thread and follow pete comments

    https://www-secure.symantec.com/connect/forums/2-lu-file-download-failed-due-http-error0#comment-8161351



  • 5.  RE: SEPM 11.0 issue, Liveupdate work but cannot push to all client

    Posted Oct 16, 2013 05:48 AM

    Does the client have space on C:?



  • 6.  RE: SEPM 11.0 issue, Liveupdate work but cannot push to all client

    Posted Oct 16, 2013 06:22 AM

    Yes,  I have more  space on C:\  ,  on my machine have more 80G.

     

     



  • 7.  RE: SEPM 11.0 issue, Liveupdate work but cannot push to all client
    Best Answer

    Posted Oct 16, 2013 07:07 AM

    I found that GUP  issue.

     

    I've tried to  bypass  GUP  for this moment and let all client get new definition.

    so, How can I get latest version of GUP ?

     

    Thank you for all reply!!!

     



  • 8.  RE: SEPM 11.0 issue, Liveupdate work but cannot push to all client

    Posted Oct 16, 2013 07:10 AM

    Check this articles

    Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection (SEP)

     

    Article:TECH104539 | Created: 2008-01-01 | Updated: 2011-09-15 | Article URL http://www.symantec.com/docs/TECH104539

     



  • 9.  RE: SEPM 11.0 issue, Liveupdate work but cannot push to all client

    Posted Oct 19, 2013 06:51 PM

    Run the SymHelp tool to troubleshoot:

    Troubleshooting computer issues with the Symantec Help support tool

    Article:HOWTO80839  |  Created: 2012-10-24  |  Updated: 2013-10-07  |  Article URL http://www.symantec.com/docs/HOWTO80839

     



  • 10.  RE: SEPM 11.0 issue, Liveupdate work but cannot push to all client
    Best Answer

    Posted Oct 20, 2013 09:55 AM

    My solution is uncheck "Group Update Provider" on SEPM.

    All client can get new definition as normal.

     

    Best regard,