Endpoint Protection

We recently performed an upgrade of SEPM 11 to 12.1. The upgrade appeared to have gone well, is properly licensed and is communicating with updated 12.1 clients successfully, at least for a while.

After a few days however, SEPM seems to stop pushing new definitions, signatures, policy changes and exclusions etc to the clients. The SEPM server doesn't really reveal anything - the SEPM services are all running and the logs appear to be clean (including the Windows logs).

If we either restart the SEPM services or the server itself (almost the same difference, I guess), everything bursts back into life, almost immediately. It's as though the SEPM services are going to sleep and need a wake up.

Has anyone else experience this, or does anyone have any suggestions to solve or diagnose the fault?

With thanks

Does all your clients reports to your manager 

Anything in the Apache logs ([SEPM folder]\apache\logs) around the time prior to rebooting? How many SEP clients do you have? Was your SEPM 11.0.x using port 80 (or in the Default website) prior to the migration?

sandra

https://www-secure.symantec.com/connect/articles/troubleshooting-articles-symantec-endpoint-protection-version-121

Regards

we are experiencing it too. some clients are not updating ang thinking there might be a problem on the liveupdate policy bit the other machines are good. some clients are becoming offline eventhough they technically online when you checked the actual station. I tried the sylinkdrop but no good.

Do you update directly from the SEPM or via GUPs?