Endpoint Protection

All of our clients began getting popups that the virus defs were over 7 days old. I checked the SEPM server and it was getting a Live Update error return code = 4. I tried everything suggested related to this error and finally had to uninstall Live Update from the SEPM server, reboot, and install Live Update again. Live Update is now working but the Home, Monitor, and Reporting Tabs no longer work on the console. I get a page cannot be displayed error. HTTP 500 Internal Server error.

This only happened after I removed Live Update and reinstalled. If I use the SEPM console on a different system everything works correctly so it seems something was changed on the SEPM server. I ran a repair on the SEP Management console but that didn't help anything either.

To avoid the surprise of finding out Live Update isnt working I added a notification as well. Problem is I keep getting notifications for An Unexpected exception has occurred "Not in GZIP format". This defeats the purpose of the Live Update error notification since I'm spammed with this notification. What is this error anyways?

SEPM version revision being used - RU5

Problem resolved. The Bypass proxy server for local addresses was unchecked in IE. Once enabled the console displays the first three tabs again.

Now if I can just figure out what the damn gzip error message means.

If number of contents revisions to keep is set to 1 in SEPM you will get "Not in Gzip format" every time Live update tries to run. 

Thanks for the suggestion. Currently its set to keep 12 revisions. Any other ideas regarding the gzip error?

Does this provide any help with this issue? Found it in the scm-server-*.log

2009-10-28 15:15:16.684 SEVERE: ================== Server Environment ===================
2009-10-28 15:15:16.684 SEVERE: os.name = Windows 2003
2009-10-28 15:15:16.684 SEVERE: os.version = 5.2
2009-10-28 15:15:16.684 SEVERE: os.arch = x86
2009-10-28 15:15:16.684 SEVERE: java.version = 1.6.0_14
2009-10-28 15:15:16.684 SEVERE: java.vendor = Sun Microsystems Inc.
2009-10-28 15:15:16.684 SEVERE: java.vm.name = Java HotSpot(TM) Server VM
2009-10-28 15:15:16.684 SEVERE: java.vm.version = 14.0-b16
2009-10-28 15:15:16.699 SEVERE: java.home = E:\Program Files\Symantec\Symantec Endpoint Protection Manager\jdk\jre
2009-10-28 15:15:16.699 SEVERE: catalina.home = E:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat
2009-10-28 15:15:16.699 SEVERE: java.user = null
2009-10-28 15:15:16.699 SEVERE: user.language = en
2009-10-28 15:15:16.699 SEVERE: user.country = US
2009-10-28 15:15:16.699 SEVERE: scm.server.version = 11.0.5002.333
2009-10-28 15:15:21.548 SEVERE: ================== StartClientTransport ===================
2009-10-28 15:15:22.029 SEVERE: Schedule is started!
2009-10-28 15:15:54.221 SEVERE: Unknown Exception in: com.sygate.scm.server.task.ScheduledReportingTask
java.io.IOException: Not in GZIP format
 at java.util.zip.GZIPInputStream.readHeader(GZIPInputStream.java:137)
 at java.util.zip.GZIPInputStream.<init>(GZIPInputStream.java:58)
 at java.util.zip.GZIPInputStream.<init>(GZIPInputStream.java:68)
 at com.sygate.scm.server.task.ScheduledReportingHelper.doRequest(ScheduledReportingHelper.java:379)
 at com.sygate.scm.server.task.ReportWriter.generateReport(ReportWriter.java:86)
 at com.sygate.scm.server.task.ScheduledReportingTask.generateReport(ScheduledReportingTask.java:186)
 at com.sygate.scm.server.task.ScheduledReportingTask.run(ScheduledReportingTask.java:139)
 at java.util.TimerThread.mainLoop(Timer.java:512)
 at java.util.TimerThread.run(Timer.java:462)
2009-10-28 15:16:05.090 SEVERE: Unknown Exception in: com.sygate.scm.server.task.ScheduledReportingTask
java.io.IOException: Not in GZIP format
 at java.util.zip.GZIPInputStream.readHeader(GZIPInputStream.java:137)
 at java.util.zip.GZIPInputStream.<init>(GZIPInputStream.java:58)
 at java.util.zip.GZIPInputStream.<init>(GZIPInputStream.java:68)
 at com.sygate.scm.server.task.ScheduledReportingHelper.doRequest(ScheduledReportingHelper.java:379)
 at com.sygate.scm.server.task.ReportWriter.generateReport(ReportWriter.java:86)
 at com.sygate.scm.server.task.ScheduledReportingTask.generateReport(ScheduledReportingTask.java:186)
 at com.sygate.scm.server.task.ScheduledReportingTask.run(ScheduledReportingTask.java:139)
 at java.util.TimerThread.mainLoop(Timer.java:512)
 at java.util.TimerThread.run(Timer.java:462)

 Lets not confuse with the issues lets open a new thread for this..

Ok sounds good.