Endpoint Protection

 View Only
Expand all | Collapse all

Symantec Endpoint Protection and HTTPS

  • 1.  Symantec Endpoint Protection and HTTPS

    Posted Sep 21, 2009 04:07 PM

    I'm trying to have Symantec Endpoint Protection running HTTPS.
    (version 11.0.4202.75)
    I have followed the following guides with no luck:

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009021209400348
    http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/92fbfba35785ff688825734000755f35?OpenDocument

    After making the changes I can't start the Symantec Endpoint Protection Manager console. It causes the Symantec Endpoint Protection Manager service to stop. I get the following error in the eventlog:

    The Java Virtual Machine has exited with a code of -1, the service is being stopped.


    I want to have my Clients connect securely to the server whether they're on Internet or local LAN / VPN. I have forward port 443 in my firewall to the management server.

    Hope anyone can help...

    :-) Jens


     



  • 2.  RE: Symantec Endpoint Protection and HTTPS

    Posted Sep 21, 2009 04:16 PM
    What version of Java are you running on your SEPM server?
    What is SEPM running on? (example, Server 2003 SP2 x86)


  • 3.  RE: Symantec Endpoint Protection and HTTPS

    Posted Sep 21, 2009 04:18 PM
    Hi,

          Can you please let us know the event id in the event viewer and the error code in scm-server-0.log. This would help us in heading in the right direction.


  • 4.  RE: Symantec Endpoint Protection and HTTPS

    Posted Sep 21, 2009 04:49 PM
    I manage to get it up running. Only thing not working now is reporting server.

    Here's my conf.properties:

    #Tue Aug 25 16:16:24 CEST 2009
    scm.server.version=11.0.4202.75
    scm.timer.lu_delta=2
    scm.server.type=master
    scm.db.client.bin=C\:\\Program Files\\Microsoft SQL Server\\90\\Tools\\Binn\\
    scm.timer.agentstatus=60
    scm.timer.activedirectory=86400
    scm.timer.logcollection=20
    scm.liveupdateclient.path=C\:\\Program Files\\Symantec\\LiveUpdate
    scm.agent.root=C\:\\Program Files\\Symantec\\Symantec Endpoint Protection Manager\\data
    scm.server.port=8443
    scm.schema.version.pre-upgrade=11.0.2.1
    scm.iis.http.defaultsite=1
    scm.timer.iiscache=10
    scm.agent.groupcreation=false
    scm.agent.kcs=0B885B973FD6C4D444E2DD8F70055523
    scm.db.datasource=jdbc/metadatabase
    scm.timer.appcollection=20
    scm.timer.packagebuilder=60
    scm.http.port=9090
    scm.extlog.deli=,
    scm.server.backup=C\:\\Program Files\\Symantec\\Symantec Endpoint Protection Manager\\Server Private Key Backup\\
    scm.console.log=true
    scm.server.name=SEPSERVER
    scm.server.id=F8D31C8DAC11041C016EAB8B2D31FCF9
    scm.use_https=1
    scm.iis.https.port=443

    I get the following error when I start the manager:

    Error
    Unable to communicate with the reporting component

    I cant' access https://localhost/reporting or https://servername/reporting

    I have configured SSL for both Default Web Site and Reporting

    Symantec Endpoint Protection 01.bmp

    I'm using Java v1.6.0_06 / _07 / _15

    :-) Jens


  • 5.  RE: Symantec Endpoint Protection and HTTPS

    Posted Sep 22, 2009 02:56 AM
    Does anyone have Symantec Endpoint Protection running HTTPS ?

    :-) Jens


  • 6.  RE: Symantec Endpoint Protection and HTTPS

    Posted Sep 22, 2009 04:01 AM
    We do have a test enviroment  and it runs absolutely fine without any issues.

    I have seen many customers though not running in production it runs fine in test evnvironment.

    what do u get when u try to access.

    https://localhost/reporting.

    page cannot be displayed or access denied?



  • 7.  RE: Symantec Endpoint Protection and HTTPS

    Posted Sep 22, 2009 04:35 PM
    I get a "Internet Explorer cannot display the webpage" error if I browse https://localhost/reporting or https://servername/reporting.

    It doesn't matter if SSL is enabled only on "Default Web Site" or also on "Reporting" below "Default Web Site".
    It seems like reporting is not running at all. Like conf.properties has to be edited, isn't there a file for Reporting ?

    :-) Jens


  • 8.  RE: Symantec Endpoint Protection and HTTPS

    Posted Sep 23, 2009 05:33 AM
    Noone able to help with this ?

    Can I contact support or is HTTPS unsupported ?

    :-) Jens


  • 9.  RE: Symantec Endpoint Protection and HTTPS

    Posted Sep 23, 2009 07:43 AM
    Hello JJonsson,

    HTTPS is unsupported however if you have followed the doc it should work fine.
    i have seen caseses where it works without any issues.
    If you are getting unable to communicate with reporting component then its a diff then and has nothing to do with HTTPS.

    Had any luck in seeing the home page without implimenting HTTPS?
    we need to check few permissions and DB connection.

    Is your odbc connection successful as per the below doc?

    Error: "Unable to communicate with the reporting component" when opening Symantec Endpoint Protection Manager (MR2) on Microsoft Small Business Server 2003
    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008042423112448


  • 10.  RE: Symantec Endpoint Protection and HTTPS

    Posted Oct 30, 2009 08:43 AM
    Hi!

    I'm still getting the "Unable to communicate with the reporting component" error. If have followed this link: http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008042423112448
    I'm not running Small Business Server....

    After trying several settings I have lost connection to clients.... I get "Invalid session error" in the console.

    Is there some way to revert to standard ? Remove and re-install ?

    I need a complete guide to enable HTTPS. I can't imagine how it has to be so difficult make it work....

    Can anyone please help me ?


  • 11.  RE: Symantec Endpoint Protection and HTTPS

    Posted Oct 30, 2009 09:09 AM
    http://www.symantec.com/connect/articles/how-create-new-reporting-virtual-directory-iis-manager-troubleshooting-unable-communicate-r