Video Screencast Help

Server 2003 crashed, Installed Symantec Endpoint Protection Manager on Server 2008. Should I uninstall all the clients and reinstall Symantec?

Created: 22 Aug 2013 • Updated: 25 Sep 2013 | 13 comments

Server 2003 crashed, Installed Symantec Endpoint Protection Manager on Server 2008. Should I uninstall all the clients and reinstall Symantec? as the green dot does not appear on the Clients

Operating Systems:

Comments 13 CommentsJump to latest comment

Chetan Savade's picture

Hi,

Thank you for posting in Symantec community.

I would be glad to answer your query.

Uninstall of all the clients is not required. You can restore the connection by replacing new sylink.xml.

Could you please update with the following info

1) SEPM verison

2) SEP client version

3) Total number of SEP client in the network

4) Are there any remote sites?

#Edit

Restoring communication to clients with a new Sylink.xml file

http://www.symantec.com/business/support/index?page=content&id=TECH106288

Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Fraz's picture

Dear Chetan,

Thanks  for the Solution

The SEPM Version 12.1.1000.157 RU1

I have gone through the link that is mentioned and it was fine client took the update and the green dot is there. Another question is if I will have to to this manually changing the sylink.xml file on all the clients or there is another option? As I have aroung 140 Clients :-( . ANd for the servers also Should I change the Sylink.xml file too or its better I reinstall?

Regards

 

 

 

 

 

Chetan Savade's picture

Hi,

Thank for the update.

No manual job is required. You can use SEP 12.1 sylink replacer tool to replace Sylink file on 140 clients remotely.

Check this article: Using the "SylinkReplacer" Utility

http://www.symantec.com/docs/TECH105211

On the Servers also you should simply replace the Sylink.xml, uninstall of SEP is really not required.

What's the SEP client version? Because different build of the SylinkReplacer tool is used for Symantec Endpoint Protection 11.0 than Symantec Endpoint Protection 12.1.  The same tool cannot be used due to changes in technology and file locations between SEP 11 and SEP 12.1.

 

Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Fraz's picture

Hi Chetan,

All the clients are on SEP 12.1. And should all the clients be online while performing this task? 

Regards

Chetan Savade's picture

Hello,

You can replace the sylink on all the clients those are available through the client discovery.

Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

.Brian's picture

You can simply replace the sylink on the clients from the new SEPM. Need to be on 12.1 RU2 or higher. See here:

http://www.symantec.com/docs/HOWTO81109

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Chetan Savade's picture

Hi,

Do you have Server Private Key Backup?

Check this article.

Symantec Endpoint Protection 12.1: Best Practices for Disaster Recovery with the Symantec Endpoint Protection Manager

http://www.symantec.com/docs/TECH105211

Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Chetan Savade's picture

Hello,

You can deploy the new package also if all the clients are on the same LAN.

Check this article.

Client Deployment Wizard Overview

https://www-secure.symantec.com/connect/articles/client-deployment-wizard-overview

Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Chetan Savade's picture

Hi,

You should have domain admin rights to replace sylink.xml file remotely.

I would suggest to use it from Server OS however if have all the necessary credentials then can run it from any machine in the LAN.

Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Fraz's picture

Hi Chetan

I tried the same I ran it from the server all the steps completed all the users Sylink files replaced thats what the log said but there is no communication yet from the client to SEPM. Is there anything else I have to do?

Regards

Chetan Savade's picture

Hi,

Windows firewall is enabled on SEPM installed machine?

Check this article

Symantec Endpoint Protection: Troubleshooting Client/Server Connectivity

http://www.symantec.com/docs/TECH105894

Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Mithun Sanghavi's picture

Hello,

Do you have an older backup of SEPM database?

If yes, check this Article:

Symantec Endpoint Protection 12.1: Best Practices for Disaster Recovery with the Symantec Endpoint Protection Manager

http://www.symantec.com/docs/TECH160736

In your case after you have installed the Symantec Endpoint Protection Manager 12.1, you may need the SylinkReplacer Utility 12.1 which may assist you to change all the sylink.xml files on all theSEP client machines, making them managed.

On a kind note:  Make sure you are installing the Latest version of SEP 12.1.3001

Check this BLOG:

https://www-secure.symantec.com/connect/blogs/latest-symantec-endpoint-protection-released-sep-121ru3

 

For SEP 12.1 clients, you need SylinkReplacer for SEP 12.1 which is only available with Symantec Technical Support Team.

 

However, for SEP 12.1 RU2 and above, you would need to use the Internal feature, check this Article:

Restoring client-server communications by using a client installation package

http://www.symantec.com/docs/HOWTO80762

SEP 12.1 RU2 and Reset Client Communication

https://www-secure.symantec.com/connect/articles/sep-121-ru2-and-reset-client-communication

For SylinkReplacer for SEP 12.1 utility, Create a case with with Symantec Technical Support Team.

How to create a new case in MySupport

http://www.symantec.com/docs/TECH58873

Phone numbers to contact Tech Support:-

Regional Support Telephone Numbers:

  • United States: 800-342-0652 (407-357-7600 from outside the United States)
  • Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
  • United Kingdom: +44 (0) 870 606 6000

Additional contact numbers: http://www.symantec.com/business/support/contact_techsupp_static.jsp

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.