Endpoint Protection Small Business Edition

For the last 5 weeks (now 6 weeks) in a row on every Monday Morning at around 3:00-3:50 am, I will get the following message emailed to me:

Message from:
    Server name: xxxxx1
    Server IP: 192.168.xx.xx
    
The Symantec Endpoint Protection Manager database has gone down and needs immediate attention.

The corresponding event id reads as follow:

Event Type:    Error
Event Source:    SQLANY 12.0
Event Category:    None
Event ID:    1
Date:        10/14/2013
Time:        3:19:36 AM
User:        N/A
Computer:    xxxxx
Description:
SQLANYs_sem5

----------

I go to the server (2003 SBS and no it was not my choice) go to the Symantec embedded Database which is set to automatic and simply start from services and everything run fine the entire week until the next Sunday am.

This only happens then. This is a closed company of 19 users with Exchange 2003 and MDaemon Server 13.03 running on another machine (win XP)

There is zero happening at 3am on Sunday morning with the exception of an email or two coming into exchange and be ready for delivery in the morning when they log in with the workstations.

We do backups every night/morning of the week with the exception of Sunday/Monday morning am. No one is there. The company is closed, The only activity that shows before this happens is an on-line defrag of the Exchange databases. It starts and finishes, but this is some 20-60 minutes before and this occurs at the same time 7 days a week, but only on Monday early morning  does he database go down. It does not have to be rebooted, there is no database corruption. Just the service has to be restarted. What gives, any explanation of why this occurs when nothing is going on?

Live update is occurring once a day at 12:15 pm. There is no database replication errors showing in SEPM.

The system could not have less activity at this time than almost any other time and beyond the one event error message- there is nothing else.

I would appreciate any help or ideas. Attached are all the relevant logs (catalina.out and catalina.err and scm-server-0.log) and while it seems to indicate it can't find something from Java- it only occurs at this one point at this one time and zero problems any other time.

I find it depressing to see that Symantec is everyday becoming more like Microsoft and that is NOT a compliment. Here is a funny emample. The spell check for thesepostings find Symantec to be an incorrect spelling- come on and get your act together.

Thanks

Tom in Dallas

Attachment(s)

logs.rar   523 KB 1 version

Also, what's the exact SEPM version and the OS it's running on? Have you tried running repair.

I'll review logs

Sepm 12.1.3 and as in above SBS 2003. Have not tried running repair until I know what I am repairing. Since this only occurs at one time of the week and there is zip/zero going on in the system- is more than wierd.

Thansk

Tom in Dallas

As I suspected and the reason that after 20 years I never seek so called technical support- there is none. I am going and would advise everyone is to rip out Symantec completely from their networks and go somewhere else. None of us have time for this nonsense. In my case that will involve about 8 companies and more than 4000 workstations and further I will be on my radio show in Dallas/Fort Worth and will be blasting Symantec for the next 6 weeks and advising people not to waste their time with nonsense.

Thanks guys for the experience It has been much like living in the jungle,.

Tom in Dallas

Tom, please IM me your contact info and I'll have someone from the product team reach out to you soon. Thank you!