Sylink and the client register again
Created: 20 Sep 2010 | 10 comments
Hello
i have a server SEPM 11 MRUa and the client are 11.0.6005.5562.
My clients SEPM disappears after 45 days not connected or manually , when the computer restart , the client SEP registers in Default group or not the target group where they were before.
it is normal like fonctionnality ?
the sylink file doesn't contain any element about group,
exemple :
<?xml version="1.0" encoding="UTF-8" ?>
- <ServerSettings DomainId="00D1AA57C0A846F8005B99ED752B6703" NameSpace="rpc">
- <CommConf>
<AgentCommunicationSetting AlwaysConnect="1" CommunicationMode="PULL" DisableDownloadProfile="0" Kcs="33B13498BD2D848E485410E11499B657" PullHeartbeatSeconds="3600" RandomizationEnabled="1" RandomizationRange="300" RememberCurrentGroup="0" RememberCurrentPolicyMode="0" UploadCmdStateHeartbeatSeconds="300" UploadLearnedApp="0" UploadLogHeartbeatSeconds="300" UploadOpStateHeartbeatSeconds="300" />
- <ServerList Name="Server List for Site SERVER SEPM ">
- <ServerPriorityBlock Name="Priority1">
<Server Address="ServerSEPM" HttpPort="8014" HttpsVerifyCA="0" VerifySignatures="0" />
<Server Address="X.X.X.X" HttpPort="8014" HttpsVerifyCA="0" VerifySignatures="0" />
</ServerPriorityBlock>
</ServerList>
- <ServerCertList>
<Certificate Name="SERVERSEPM">MIICQTCCAaqgAwIBAgIETBFIvDANBgkqhkiG9w0BAQUFADBlMQswCQYDVQQGEwJVUzELMAkGA1UE CBMCQ0ExEDAOBgNVBAcTB0ZyZW1vbnQxFTATBgNVBAoTDHN5bWFudGVjLmNvbTEMMAoGA1UECxMD c2NtMRIwEAYDVQQDEwlZUkZSTlQxMTMwHhcNMTAwNjEwMjAxOTA4WhcNMjAwNjA3MjAxOTA4WjBl MQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExEDAOBgNVBAcTB0ZyZW1vbnQxFTATBg
bWFudGVjLmNvbTEMMAoGA1UECxMDc2NtMRIwEAYDVQQDEwlZUkZSTlQxMTMwgZ8wDQYJKoZIhvcN AQEBBQADgY0AMIGJAoGBALvYau8VC9ttyd5wWZmgxeAyp9rdXQOenhzzbLlyO+/5f6PsfbS+S1od Cm0iPIBcWATp3EDHJ3yB4ftwuyPIshM7vda5y8Ah2A+xIgqerxcLZH2KT6pofNTKJBz0c1mFURfl f2Rn9FCDqot9CqXmF+VPrLTGi/YSR6b882LVTe1ZAgMBAAEwDQYJKoZIhvcNAQEFBQADgYEAUYad hHAJ4DgbNd5pk8uGYvxlmWSDUp2+qqRjX2gZZ4uWVi6voC8jwVayOYpD3BzyJKXz7G3GZwkqHXjD DNXTIJjD2+xl0UX8R9HclKZBcUuLaW5QB2fL1uRRm7ArSAASbszGcqe2p7tSQmhit1rB2Mb1xLQr ew2vLwl8Am73UWc=</Certificate>
</ServerCertList>
<LogSetting MaxLogRecords="100" SendingLogAllowed="1" UploadProcessLog="1" UploadRawLog="1" UploadSecurityLog="1" UploadSystemLog="1" UploadTrafficLog="1" />
</CommConf>
Discussion Filed Under:
Comments
this one does not have
this one does not have preferred group and hence might be reporting to default group.
Cheers!
Pete
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
It is normal.You can
Client getting automatically deleted is normal.You can configure this period in SEPM ----->admin-->servers--->local site-->properties-->General Delete the client which is not connected for --days..
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
If you manually export the
If you manually export the package selecting the group from SEPM-ADMIN-Install package
You get preferred Group in Sylink.
VMWARE-- SEP 12.1 vs McAfee vs Trend Micro
Clients move from assigned
Clients move from assigned group to Default Group within the Symantec Endpoint Protection Manager
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
hello
have a problem of identification of the robot, when I run a backup job or lotus oracle job failed:
Status error 830 Failed to get status code information, no drives available
thank you for your help
Pls create a separate thread
Pls create a separate thread for your problem.in that post clearly mention what is your problem?Also post it in appropriate form.This is antivirus form.
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
Thanks for your
Thanks for your answers
but
a) I already created a package to install client and automatically put to prefered group according to the type of chassis ( server, desktop, laptop). I modified the sylink.xml with a program.
b) 45 days is MY parameter in "deleted......." option
I want to know if the functioning about client SEP, is normal when a client was deleted ( automatically or manuall) , and this client restarts, must it to register to default group instead of to keep the preferred group
thanks & regards
When a client was deleted (
When a client was deleted ( automatically or manuall) and this client restarts, must it to register with the prefered group.If the preferred group is not available it will go to the default group (SEP will internally find it's Group using unique ID.So if you delete any group and recreate in same name also the ID will be different.).
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
verify key preferred group
Hello
I saw in register client , and the key preferred group wasn't correctly set . (HKLM\software\symantec Endpoint protection\SMC\sylink\sylink\ PreferredGroup)
i deleted a client which is correctly set and i restart it . This client is register again in the target cible
Thanks for you help
That's change on RU6 MP1 (11.0.6005.5562)
Hello,
In RU6 Mp1 you have an new registry entry, "CurrentGroup".
When a client be deleted, he try to connect on this group first, if this group cannot be found on the SEPM, he try to connect in the "PreferredGroup"...If this group cannot be found, the client goes in "Default Group".
The difference with this two registry entry is:
* "PreferredGroup" => Is Default group when you have install the SEP Client.
* "CurrentGroup" Is the last group defined for this client on the SEPM when the client have communicated with him for last time.
Would you like to reply?
Login or Register to post your comment.