Endpoint Protection

We have 6 SEPM servers that are configured load balance each other .

Normally, I see the files in C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\temp appear and disappear, and the size is a consistent 1 MB. See picture:

But there is one particular SEPM who's files in C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\temp are LARGE and PERSISTENT. See picture:

How do I troubleshoot this?

you may need to upgrade

A lot of temp files are kept in tomcat\temp directory
Fix ID: 2675567
Symptom: Many jtdsxxxx.tmp files including Java Heap Dump [semsvc_heap.hprof] build up in the tomcat\temp directory.
Solution: Developed a cleanup mechanism in a separate task to clean up old accumulated JTDS tmp files

check this link

http://www.symantec.com/docs/TECH103087

upgrade to RU7 MP2

these are temp files,u can back these and delete and then check the status.

@ Pete: Upgrading is out of the question for our organization. The Symantec Engineers we work with on a regular basis recommend upgrading, but we have so many issues with the current RU7 MP1 that upgrading will only compound these issues, or create new ones. I saw the link that you posted, but now matter how many times I empty it, (a) the directory still populates (b) it cannot delete the 100MB+ file. See below response to Rafeeq.

@ Rafeeq: I delete these temp files, but then they appear. If I don't delete these temp files, then they stay in the folder and don't disappear on their own as they are supposed to. What is WORSE: I am unable to delete the tmp file that is over 100 MB

ok, open a support ticket.i remember there is some line that needs to be added to configuration file to auto delete the files.

or you can create a scheduled task to delete these files. did you try stopping SEP service and then delete?

Pete, I tried stopping the SEP service and deleting, but no luck.

If you can tell me which line to add to the configuration line to auto delete, I believe that will be quite qute helpful......

sorry ,stop SEPM service and try deleting. I will try to get that information to you,

Pete, I stopped the SEPM service and tried deleting, but no luck :-(