Endpoint Protection

 View Only
  • 1.  SEPM not applying new Policy Updates

    Posted Sep 30, 2011 02:25 PM

    We are having an issue with SEPM which appears to have started a few days ago and is related to policy.

    Basically if I make a change in the policy it never gets updated (verified by looking at details tab in SEPM) and the client. I had to create about 65 new groups yesterday and I didnt get any errors. Now looking back at the groups the information for policy date/time version in the details tab is blank.

    If I move a client to a new group just created the client goes offline like it's lost. The client still appears in the console and then if I move it to a group that was previously there the client find itself again and connects to SEPM.

    When I make policy changes they are saved within the policy and the audit log reflects this as well. It's as if the changes never get applied to the policy. SEPM still delivers the last policy that was publshed/updated about a week ago to new installations.

    Has anyone seen this issue? Very strange!

    SEP 11 RU6 MP2



  • 2.  RE: SEPM not applying new Policy Updates

    Posted Sep 30, 2011 02:40 PM

     

    Duplicate Serial_Number, Group_ID records were preventing the Policy Serial Number from displaying on the Symantec Endpoint Protection Manager Client > Group Details tab
    Fix ID: 2028624
    Symptom: The Policy Serial Number does not display on the Client > Group Details tab in the Symantec Endpoint Protection Manager console.
    Solution: Duplicate Serial_Number and Group_ID records were preventing the Policy Serial Number from displaying. A primary key was added to avoid duplicate entries in the serial_number table.
     
     
    Sounds related however interestingly this issue was fixed in SEPm Ru6MP2.


  • 3.  RE: SEPM not applying new Policy Updates

    Posted Sep 30, 2011 02:45 PM


  • 4.  RE: SEPM not applying new Policy Updates
    Best Answer

    Posted Sep 30, 2011 07:12 PM
    I guess it wasn't fixed in RU6 MP2. Upgraded to RU7 and problems resolved. I've been holding off on RU7 so we could upgrade to 12.1 mid October. Now have to wait for RU1. Good news is RU7 resolve a few other things for us like SP1 suport for sever 2008 R2 and win7, Cygwin issues, and removed all the old deleted groups from report filters