Endpoint Protection

 View Only

  • 1.  SMC Service Restart After A Successful Definition Update

    Posted Oct 11, 2013 09:40 AM

    I have a question about SEP's smc service behaviour. While I was investigating one of our computers' SEP's client management log, I've noticed that smc service restarted after an individual succesful definition update. Update process includes Symantec Whitelist, Virus and Spyware Definitions Win32 and Intrusion Prevention Signatures updates respectively. The question is, is this an expected and normal behaviour.



  • 2.  RE: SMC Service Restart After A Successful Definition Update

    Posted Oct 11, 2013 09:43 AM

    I believe it needs to reload in order for the updates to take affect



  • 3.  RE: SMC Service Restart After A Successful Definition Update

    Trusted Advisor
    Posted Oct 11, 2013 10:10 AM

    Hello,

    Could you please let us know what version of SEP are you running? Is that SEP 11.x OR SEP 12.1?

    Is this issue occurying on a number of client machines or a single client machine?

    Try changing communication mode to "PULL" and increase the heartbeat to 10 minutes or greater.

    Make sure you have the client to Symantec Endpoint Protection 12.1 Release Update 2 Maintenance Pack 1 or above.

    If that does not assist, you may need to contact Symantec Technical Support and create a case.

    Check these Steps below:

    How to create a new case in MySymantec

    http://www.symantec.com/business/support/index?page=content&id=TECH58873

    Phone numbers to contact Tech Support:-

    Regional Support Telephone Numbers:

    • United States: https://support.broadcom.com (407-357-7600 from outside the United States)
    • Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
    • United Kingdom: +44 (0) 870 606 6000

    Additional contact numbers: http://www.symantec.com/business/support/contact_t...

    Hope that helps!!


  • 4.  RE: SMC Service Restart After A Successful Definition Update

    Posted Oct 11, 2013 11:19 PM

    Check same problem related thread

    https://www-secure.symantec.com/connect/forums/client-stops-and-starts-again



  • 5.  RE: SMC Service Restart After A Successful Definition Update

    Posted Oct 12, 2013 05:39 AM

    I think it is normal behaviour because same type of log is avail in my systems while def update



  • 6.  RE: SMC Service Restart After A Successful Definition Update

    Posted Oct 14, 2013 05:24 AM

    Hi Mithun,

    SEP version is 12.1.157 on a Windows XP SP3 machine. And this is the actual log,

     
    Windows Version info:
     
    Operating System: Windows XP (5.1.2600 Service Pack 3)
     
    Network  info:
     
    No.0  "Local Area Connection"  00-24-1d-ab-69-40  "Intel(R) 82567LM-3 Gigabit Network Connection" 192.11.106.63 
     
     
    1978 09.10.2013 08:34:55 Information 12070202 Symantec Management Client has been started.
    1979 09.10.2013 08:35:02 Information 12070301 Connected to Symantec Endpoint Protection Manager (192.11.88.99)
    1980 09.10.2013 08:35:06 Information 12071051 SONAR has been enabled
    1981 09.10.2013 08:40:29 Information 12070800 An update for Revocation Data was successfully installed.  The new sequence number is 131008040.
    1982 09.10.2013 08:40:29 Information 1207030C Downloaded new content update from the management server successfully. 
     
     
     
    1983 09.10.2013 08:40:33 Information 12070800 An update for Symantec Whitelist was successfully installed.  The new sequence number is 131008022.
    1984 09.10.2013 08:40:33 Information 1207030C Downloaded new content update from the management server successfully. 
     
     
     
    1985 09.10.2013 08:41:33 Information 12070800 An update for Virus and Spyware Definitions Win32 was successfully installed.  The new sequence number is 131008019.
    1986 09.10.2013 08:41:33 Information 1207030C Downloaded new content update from the management server successfully. 
     
     
     
    1987 09.10.2013 08:42:16 Information 12070800 An update for Intrusion Prevention Signatures was successfully installed.  The new sequence number is 131008011.
    1988 09.10.2013 08:42:16 Information 1207030C Downloaded new content update from the management server successfully. 
     
     
     

    1989 09.10.2013 09:00:02 Information 1207021A Stopping Symantec Management Client....

    1990 09.10.2013 09:00:11 Information 12070204 Symantec Management Client is stopped.

    1991 09.10.2013 09:02:18 Information 12071000 Network Intrusion Prevention enabled
    1992 09.10.2013 09:02:18 Information 12071000 Internet Explorer Browser Intrusion Prevention enabled
    1993 09.10.2013 09:02:18 Information 12071000 Firefox Browser Intrusion Prevention enabled
    1994 09.10.2013 09:02:19 Information 12070218 Network Threat Protection's firewall is enabled
    1995 09.10.2013 09:02:20 Information 12070201 Symantec Endpoint Protection -- Engine version: 12.1.157
     
     
    So far I have seen this issue just on a single client. But honestly I didn't investigate other computer's logs. Actually I want to learn that is this a normal behaviour or do I need to open a case for this issue?
     
    Thanks Brian and AJ. I fully aggree with you but I wanted to be sure.


  • 7.  RE: SMC Service Restart After A Successful Definition Update

    Posted Oct 21, 2013 02:14 AM

    Hi

    What is the version of SEP client

    Regards