Good day everyone,

Previously, I have SEPM version 11 installed on a server and all clients are able to communicate with the manager.

Because of some issues with the SEPM and there is plan to upgrade SEPM to version 12, I uninstalled SEPM version 11 and installed SEPM version 12.

With newly installed SEPM version 12, there are no clients connected to the SEPM.

By the time I try to remote push installation package to clients, it always show error as below:

Error: "Login to [computer] failed. The client could not be installed on the remote computer.

After that, I try to manually replace the sylink.xml on the clients and it shows online on the SEPM.

But, I still unable to remote push the version 12 updates to the clients with the error as above.

 

FYI, the SEPM server is on a different VLAN/farm with the client is also from a different VLAN/farm.

These different VLANs are controlled by the firewall.

Kindly advice and helps to solve the error above.

Thanks in advance.

can you use  Autouprade feature

Upgrading clients by using AutoUpgrade

http://www.symantec.com/business/support/index?page=content&id=HOWTO55058

also check this

unction	Component	Protocol and port
Push deployment	Management server and client	TCP 139 and 445 on management servers and clients UDP 137 and 138 on management servers and clients TCP ephemeral ports on management servers and clients

 

You can first try to deploy communication setting ( sylink) get all clients to 12.1.4 then upgrade using auto upgrade

http://www.symantec.com/business/support/index?page=content&id=TECH199124

the account  used should be member of local admin.

 

Make sure your user name and password arerights and have access on all the remote system

Error: "Login to [computer] failed. Check the username and password and try again."

Article:TECH91715

|

Created: 2009-01-08

|

Updated: 2013-11-12

|

Article URL http://www.symantec.com/docs/TECH91715

 

See this articles

 

 

Function	Component	Protocol and port
Push deployment	Management server and client	TCP 139 and 445 on management servers and clients UDP 137 and 138 on management servers and clients TCP ephemeral ports on management servers and clients

http://www.symantec.com/business/support/index?page=content&id=HOWTO81451

http://www.symantec.com/connect/articles/overview-push-deployment-wizard-symantec-endpoint-protection-121

See this thread

https://www-secure.symantec.com/connect/forums/whats-ports-i-need-open

Hi all, thanks for your reply.

Hi Pete, I have tried auto upgrade, but there is no respond. Can you please explain more about the ports?

Hi Technical, the username and password that I am using definitely has access to remote system and I have followed all the steps in this document : http://www.symantec.com/business/support/index?page=content&id=TECH91715.

Hi Rafeeq, I have tried to deploy communication package and new package. But, both also faced the same error as mention.

You can open Port 8014 for communication and autoupgrade

http://www.symantec.com/connect/articles/upgrade-clients-sep-121-auto-upgrade-feature

for autoupgrade, its the SEPM listening port. by default its 8014

So, I need to open outgoing connection from SEPM Server to Client computer?

Or bidirectional connection?

Thanks all for your reply.

You can open bidirectional Port

Hi James and Pete,

I have opened port 8014 for both direction from sepm server to client.

But, I still can't remote push the package.

Thank you.

Hi,

I think are you using autoupgrade feature ?

If you are using autoupgrade fetaure Check Deployment Status in Client properties in SEPM console .

Disable the firewall on the sepm server, try pushing the package, if it succeds then we can tweak the fw rules.

if it says Access denined then its a permission issue, are these machines in domain or work group?

UAC enabled on cleints?

 

Coutd you please update your thread, if your require any more assistance then please revert otherwise select the mark as solution at helpful comment.