Endpoint Protection

 View Only

  • 1.  SEPM Security Status Details showing incorrect information?

    Posted Jan 29, 2010 02:53 PM
      |   view attached
    The Status details shows clients with out of date intrusion prevension signatures, but if I bring up the client detail, it shows that it is up to date (screen shot attached). Anyone ever run into this?

    Thanks!

    Edit: Most of these clients are on replica servers. Servers and clients are running 11.0.5


  • 2.  RE: SEPM Security Status Details showing incorrect information?
    Best Answer

    Posted Jan 29, 2010 03:06 PM
    i think its just one client
    so delete the client from the console
    go to the client, right click on the tray icon, click update policy
    this should upload new logs to the sepm, and sepm should update itself


  • 3.  RE: SEPM Security Status Details showing incorrect information?

    Posted Jan 29, 2010 03:10 PM
    Thanks for responding!

    It is multiple clients (most of the failures reported appear to be false).

    If the client is deleted from SEPM, will it be readded when it checks in next?


  • 4.  RE: SEPM Security Status Details showing incorrect information?

    Posted Jan 29, 2010 03:16 PM
    it will be re-added net time when it checks in
    delete one client from sepm. and update the policy, lets see if it comes from new   info
    if that works,you can try the same for others.


  • 5.  RE: SEPM Security Status Details showing incorrect information?

    Posted Jan 30, 2010 07:32 AM
    What is the version of SEPM?
    If it is not RU5 pls upgrade it.
    In earlier version one bug was present which will cause same problem ..

    There is a possibility of duplicate clients also. In SEPM in the browser run the following command it will clear duplicate clients

    http://127.0.0.1:9090/servlet/ConsoleServlet?ActionType=ConfigServer&action=CleanClients


    Ref:to remove the duplicate entries in the SEPM database


  • 6.  RE: SEPM Security Status Details showing incorrect information?

    Posted Jan 30, 2010 08:24 PM
    Please try what Rafeeq said first and let us know how it goes. If that doesn't work and you are using replication then please view the article below.

    Symantec Endpoint Protection Manager (SEPM) 11.0 RU5 Report Shows Incorrect Intrusion Prevention Signature (IPS) Information After Replication
    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009122321122848

    Thanks
    Grant


  • 7.  RE: SEPM Security Status Details showing incorrect information?

    Posted Apr 30, 2010 04:06 AM

    Hi,

    I deleted one client as a test and updated the policy from the machine itself. It didnt re-appear in the clients list. I then searched for unmanaged machines, found it and redeployed the client from the SEPM but it is still not showing in the SEPM...yet, the machine itself is displaying a green dot so its a bit confusing because it did download its updates etc but it not showing in the clients list :/

    Any ideas?