Endpoint Protection

Hi team.

I am facing issue in SEPM 11.0. SEPM manager not pussing update to clients and SEPM manager is updated with the latest definition. All clients are not updated with the latest definition include windows XP and Servers. I have tryed by manuly push the definition by manager but still fail to take update. In Manager some client are showing online status and some are showing offline status.

 I have changed sylink file on 1 client machine ( windows 2003 server) after replacing sylink it is showing on line but not taking update.

Please help to share recommanded setting for SEPM with client.

Any help or suggestions would be appreciated!

Thanks & Regards
Harvansh Singh

can you post the sylink logs?

also check communication

http://www.symantec.com/docs/TECH95789

HI,

All this client are green dot ?

Symantec Endpoint Protection Manager 11.x is not updating 32 or 64 bit virus definitions

http://www.symantec.com/business/support/index?page=content&id=TECH104721

Hi,

Have you done any changes on the SEPM prior to this issue?

Make sure policy serial number is correct on the SEPM and at SEP clients. Also try to make some other changes in the policy and make sure policy number is updating or not.

If possible reboot the server and monitor the status.

Please update this thread after following suggested steps.

Hi Chetan,

I have checked the serial policy serial number is not correct on the SEPM and at all SEP clients.

Please suggest, how matches the policy on all clients there are more then 2000 clients. on 1 machine i replace the sylink file , now policy is currect with the manager. Any way to change to policy no on all the clients. I have sylink replacer tool if we are using this, it is taking too much time.

Please suggest any sortest way to currect the policy..

Thanks & Regards
Harvansh Singh

HI,

Do you have reinstall SEPM manger ?

if yes do you have follow Disater Recovery process 

Symantec Endpoint Protection 11.x: Best Practices for Disaster Recovery with the Symantec Endpoint Protection Manager

http://www.symantec.com/business/support/index?page=content&id=TECH102333

Hi Chetan,

We did not re-install the SEPM but we repaire the SEPM and restore the 1 month database.

Thanks & Regards
Harvansh Singh

that means the client has not communicated becuase of the certificate change.

you need to use the sylink replacer on all the clients that are not reporting.

Does the client reporting and updated with policy serial number has got the latest update from SEPM?

Hi,

Why you are restore one month old database ?

Do you have Repaire before database ?

If yes please restore...

Other wise you can use syslink replace toll.

Hi,

Could you confirm why did you restroed 1 month old database?

Had you taken database backup when everything was working fine?

Do you have any old certificates, if yes try to import them in SEPM.

Probably it's happening due to certificate mismatch.

Hi,

First telnet the port 8014 client to your SEPM Server. If the client is able to telnet the server then download the defination exe file or replace the Sylink file.

Regards,

Syed Saied

Hi ,

I have only 1 month old database hence i restore the same. I did not have latest data base morethen 1 month

I have taken database backup, when it was working fine same i restore.

I did not old certificate, i have taken on only data base backup.

Thanks & Regards
Harvansh Singh

HI,

If you don't have old certificate you can use sylink replacer tool.

Hi,

This is too difficult to replace the sylink by sylink replacer. We have more then 2000 clients machines.

Please confirm if any other solution is there.

Thanks & Regards
Harvansh Singh

Hi,

1) Export Sylink.xml from the SEPM console and compare it with SEP client sylink.xml, if possible PM me both the Sylink.xml files.

2) Replace sylink.xml on 2-3 clients & check the communication.

What is the location for Sylink.xml in Symantec Endpoint Protection 12.1?

http://www.symantec.com/docs/TECH165055

Restoring communication to clients with a new Sylink.xml file

http://www.symantec.com/business/support/index?page=content&id=TECH106288

HI,

Our Last hope certificate are not available so you can replace syslink.xml file to sylink replacer tool.

If you want to reduse this problem next time you can take proper backup as per artical.

Symantec Endpoint Protection 11.x: Best Practices for Disaster Recovery with the Symantec Endpoint Protection Manager

http://www.symantec.com/business/support/index?page=content&id=TECH102333

Hi

Please check the communication between the clients and SEPM

http://www.symantec.com/business/support/index?page=content&id=HOWTO80743&actp=search&viewlocale=en_US&searchid=1351856783699

Regards

Hi Harvansh,

Could you please confirm which you have performed to resolve this issue?

Hi All,

Thanks for your valuable support. Now issue got resolved.

Sorry for delay to updae.

Regards

Harvansh Singh