Endpoint Protection

after installing the new update version 11.0.4020.75 , all the servers are working fine except the SQL server works offline ,although it was connected fine to the manager before installing the new packege , i uninstall the client end point on the SQL server and install it back still working offline
the ping between the server carry the End Point managment and the SQL server is working fine
kindly advice for solving this problem

By SQL server off line do you mean the SEP client on the SQL server is not communicating to the SEPM or you SQL server it self is not connecting to the network?

Please let me know if understand your comment correctly ?

You mean to say that you were having an old version of SEP client on the SQL server, Then you upgrade it to 11.0.4020.75 & after this the server is not showing in the manager or its not having a green dot ? 

I Also assume that the both the server can ping each other.....

- If this the case then try changing the Sylink on the SQL server 
- if still it showing offline then check if you firewall enable on the server .
- Also try doing the secar test following the below mention document.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007101711140148

Hope this helps..

the SEP client on the SQL server is not communicating to the SEPM ,it gives intrusion prevention segnature failure on the symantec management console monitor
and offline by checking the managment on the SQL server SEP client , it cant get the virus defination from the SEPM

i upgrade it to 11.0.4020.75 & after this the server is showing in the manager but  its not having a green dot
- i changed the syslink file using the syslink drop tool ,update the policy also from the client
-i tryed the secar test gives OK , working fine

still the SEP on the SQL offline

This case will need to check the sylink log.. Follow the document below to create the logs..

http://service1.symantec.com/support/ent-security.nsf/docid/2008041812561948



 

Please upload the sylink logs on this Forum to get the sylink toggle you can check the download option on the forun.

i followed your link and create the dumpsyslink string on the registery to be created on drive C
and stopped and start the smc service but it create no log on drive C...!!!!

When you did this step:

Right Click on DumpSylink, and click Modify. In the Value data field, specify the location and name desired for the dump file. (I.E. C:\Sylink.log) Then click OK.

Did you keep track of where you specified the location of the dump file? If you put it at C:\Syslink.log then it should be there, if you put it somewhere else like C:\Program Files\Syslink.log then that is where it will be. Try the process again and make sure you specify exactly where to put the file.

Thanks
Grant

still the log file not created , i track the path i set on the value data for the dumpsys link string which is folder on drive C i created called Symantec
so the path is C:\Symantec , when i check the folder its empty with no log created..!!!
i created this value after following the link you send  ( HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink )

no reply...!!

Just tried the whole link out on my machine and it worked fine. Check these things:

1. Make sure you are doing this step (required in MR3 and above) [HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC]
"smc_debuglog_on"=dword:00000001

2. When you are setting your path don't use "C:\Symantec", like the link says you must do "C:\Symantec\Sylink.log" or just "C:\Sylink.log" if that is where you want it. I think you were forgetting the actually place the Sylink.log part

finally i got log file :)
would u mind tell me how i can upload this log as i see no attach option on the reply
i want to link the attachment to the same session we have

What you want is to let the SEP client on the SQL server to connect to the SEPM again, right?

Now, you can try this solution:
1. Uninstall the SEP client on the SQL server;
2. Delete the client record from SEPM;
3. Export a SEP client install package;
4. Re-install the SEP client on the SQL server using the install package just exported.

actually i did all this steps before i start sending for support ,after i did uninstall and install back it workoffline also i also delete the client record from the SEPM ,update the policy and its also offline..!!

i had dumpsylink.log created to i need to upload it to you
and if so how can i upload it to this session

still the same problem after uninstall and install back..!!!
still the SQL offline

I don't think you can add attachments to the replies in a post.  You should try to edit your original post to see if you can attach it there. I have a slightly different UI than you since I am technical support so I am not completely sure if you have "access" to some of the same options I do. If the log isn't too long you can just post it plain text in the reply box. Glad you got the logs working.

Grant-

still the case is open and with no reply from the support ...!!!!
 

Can you test the ODBC connection? Post error logs here.

I am going to PM you with some instructions on getting the Logs to me, so I can post the logs for you. They are critical with helping us solve this issue. Hopefully these speeds things up.

Grant-

Hi Grant_Hall..
could you give us the summary on how his issue was resolved?
thanks..

This issue has not been resolved. Still waitng to here about the possibility of logs : (    If you are having trouble on this issue, you should make a new post and provide the reference to this one if you think it is relavent. Sorry I can be of more help, but I haven't got any response back lately from the original poster.

Grant-