Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager
Updated: 21 May 2010 | 32 comments
This issue has been solved. See solution.
I deploy Symantec Endpoint Protection Client in Window XP Machine.I cannot see green dot icon after installation is finish.so i try with SylinkDrop to that client .But the green dot won't appear into the Symantec Endpoint Protection Client.My Symantec Endpoint Protection Manager is Window XP too.http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008091215040048 I try that solution.I can telnet the Symantec Endpoint Manager,I can ping the SEPM,I can Access all the Symantec Web Page.I trun off the firewall 2 of these machine.How should i do to fix that problem?
discussion Filed Under:
Comments
How many clients do you have?
How many clients do you have? is it more than 10 ?
Have u turned off firewall on both ends?
Do a secars test and let us know what HTTP code do you see or do you see a OK
Testing Communication from an Endpoint Protection client to the Endpoint Protection Manage
http://service1.symantec.com/support/ent-security....
VMWARE-- SEP 12.1 vs McAfee vs Trend Micro
Hi
For the communication to happen you need to telnet port of your IIS
Have you installed SEPM on port 80 / 8014
You need to disable the windows firewall on both the machines.
Other than this , there should not be any problem in communication.
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
hi
I installed SEPM on port 80.I disable the firewall on both of the machine.How to test secars test? Vikram Kumar page is won't work.
Browse to the following
Browse to the following website in I.E
http://<serveripaddres>/secars/secars.dll?hello,secars
If it says OK then your client-server communication is reported to be working fine.
You should also grab the sylinkmonitor utility to check on communications issues.
Just search the Knowledge base for it.
cheers
Z
hello
I test your solution zer0. It status is OK.But the green dot icon is not appear and the connection status is Offline.
Can you paste the
Can you paste the Sylinkmonitor log here?
De facto when AV does something, it starts jumping up and down, waving its arms, and shouting "Hey! I found a virus! Look at me! I'm soooo goooood!"
Increase the Connection limit
Increase the Connection limit of Windows Xp. Bydefault it is 10 and can be increase to 254.
Visit the link mentioned below:
http://www.dslreports.com/faq/10253
Ajit
Regards'
Ajit Jha
Technical Consultant
STS
hi again
I test my symantec endpoint protection manager with symantec support tool.It won't show any error in IIS.
Hello
Is there anybody have solution?
unmanaged
Hello
didn't you install unmanaged client, did you?
and one more thing please. how you ping the sep manager from client? ping ip address or computer name?
maybe client cannot resolve the computer name. can you check it with nslookup?
Thanks
Everything works better when everything works together.
Where you tried to reinstall
Where you tried to reinstall the client package....If no Try that ...
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
No
I didn't install unmanaged client.I make installation package from symantec endpoint protection manager. after that i copy it into the stick and install it into the client machine.I can ping both ip address and computer name.I already checking with nslookup.
Reinstall
I reinstall SEP for 3 time.It doesn't make any change.
Have you run the
Have you run the sylinkmonitor tool?
Can you please paste the log files in here if it doesn't make any sense to you.
Z
Hi, Stop the smc service on
Hi,
Stop the smc service on the cllient from Run ie,go to Start\Run & type smc -stop.
Export the sylink.xml file from the Endpoint Protection Manager & paste it on the client in the following path C:\Program files\Symantec.Then restart the service manually.Wait for sometime (10-15 mins) and the client will display the green dot on the SEP icon.
Here is sylink monitor tool logfiles
read error, exit
11/02 19:01:58 [3056] <ParseErrorCode:>12029=>The attempt to connect to the server failed.
11/02 19:01:58 [3056] <SendRegistrationRequest:>SMS return=0
11/02 19:01:58 [3056] <ParseHTTPStatusCode:>0=>Uninterpreted Status
11/02 19:01:58 [3056] <SendRegistrationRequest:>ERR to query content length
11/02 19:01:58 [3056] <SendRegistrationRequest:>Content Lenght =>
11/02 19:01:58 [3056] HTTP returns status code=0
11/02 19:01:58 [3056] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
11/02 19:01:58 [3056] <SendRegistrationRequest:>COMPLETED, returned 5
11/02 19:01:58 [3056] HEARTBEAT: Check Point 5.1
11/02 19:01:58 [3056] <ScheduleNextUpdate>new scheduled heartbeat=32 seconds
11/02 19:01:58 [3056] HEARTBEAT: Check Point 8
11/02 19:01:58 [3056] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
11/02 19:01:58 [3056] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
11/02 19:01:58 [3056] <RegHeartbeatProc>====== Registration Procedure stops at 19:01:58 ======
11/02 19:01:58 [3056] HEARTBEAT: Check Point 10
11/02 19:01:59 [3056] HEARTBEAT: Check Point Complete
11/02 19:01:59 [3056] <RegHeartbeatProc>Done, Heartbeat=32seconds
11/02 19:01:59 [3056] HeartbeatProcFailed to get profile with proxy setting 1
11/02 19:01:59 [3056] <CheckHeartbeatTimer>====== Heartbeat loop stops at 19:01:59 ======
11/02 19:02:14 [3216] <CSyLink::mfn_DownloadNow()>
11/02 19:02:14 [3216] </CSyLink::mfn_DownloadNow()>
11/02 19:02:32 [3056] <CheckHeartbeatTimer>====== Heartbeat loop starts at 19:02:32 ======
11/02 19:02:32 [3056] <GetOnlineNicInfo>:Netport Count=1
11/02 19:02:32 [3056] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.xx.xx" Mac="00-1b-98-b1-91-7a" Gateway="192.168.xx.xx" SubnetMask="0.0.0.0"/></SSANICs>
11/02 19:02:32 [3056] <CalcAgentHashKey>:CH=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
11/02 19:02:32 [3056] <CalcAgentHashKey>:CHKey=84ACE5ACDB5E7B49450A761225AE17C3
11/02 19:02:32 [3056] <CalcAgentHashKey>:C=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.org
11/02 19:02:32 [3056] <CalcAgentHashKey>:CKey=ACCB3D87332BCFE53EBCF21A23E55705
11/02 19:02:32 [3056] <CalcAgentHashKey>:UCH=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
11/02 19:02:32 [3056] <CalcAgentHashKey>:UCHKey=F071AC26371DB61904DBF7555664EA07
11/02 19:02:32 [3056] <CalcAgentHashKey>:UC=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.org
11/02 19:02:32 [3056] <CalcAgentHashKey>:UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
11/02 19:02:32 [3056] <DoHeartbeat>HardwareID=AF4876A83ACC58C5C2C804C0B910BF9E
11/02 19:02:32 [3056] <DoHeartbeat>CHKey=84ACE5ACDB5E7B49450A761225AE17C3
11/02 19:02:32 [3056] <DoHeartbeat>CKey=ACCB3D87332BCFE53EBCF21A23E55705
11/02 19:02:32 [3056] <DoHeartbeat>UCHKey=F071AC26371DB61904DBF7555664EA07
11/02 19:02:32 [3056] <DoHeartbeat>UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
11/02 19:02:32 [3056] <DoHeartbeat> Set heartbeat event
11/02 19:02:32 [3056] Use new configuration
11/02 19:02:32 [3056] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 19:02:32 ======
11/02 19:02:33 [3056] HEARTBEAT: Check Point 1
11/02 19:02:33 [3056] <GetFirstSEMServer> Selecting a random server
11/02 19:02:33 [3056] <GetFirstServer> Using server 'server.sophies.org'
11/02 19:02:33 [3056] HEARTBEAT: Check Point 2
11/02 19:02:33 [3056] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
11/02 19:02:33 [3056] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
11/02 19:02:33 [3056] HEARTBEAT: Check Point 3
11/02 19:02:33 [3056] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
11/02 19:02:33 [3056] HEARTBEAT: Check Point 4
11/02 19:02:33 [3056] <RegHeartbeatProc>===Registration STAGE===
11/02 19:02:33 [3056] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator
Here is sylink monitor tool logfiles
read error, exit
11/02 19:01:58 [3056] <ParseErrorCode:>12029=>The attempt to connect to the server failed.
11/02 19:01:58 [3056] <SendRegistrationRequest:>SMS return=0
11/02 19:01:58 [3056] <ParseHTTPStatusCode:>0=>Uninterpreted Status
11/02 19:01:58 [3056] <SendRegistrationRequest:>ERR to query content length
11/02 19:01:58 [3056] <SendRegistrationRequest:>Content Lenght =>
11/02 19:01:58 [3056] HTTP returns status code=0
11/02 19:01:58 [3056] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
11/02 19:01:58 [3056] <SendRegistrationRequest:>COMPLETED, returned 5
11/02 19:01:58 [3056] HEARTBEAT: Check Point 5.1
11/02 19:01:58 [3056] <ScheduleNextUpdate>new scheduled heartbeat=32 seconds
11/02 19:01:58 [3056] HEARTBEAT: Check Point 8
11/02 19:01:58 [3056] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
11/02 19:01:58 [3056] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
11/02 19:01:58 [3056] <RegHeartbeatProc>====== Registration Procedure stops at 19:01:58 ======
11/02 19:01:58 [3056] HEARTBEAT: Check Point 10
11/02 19:01:59 [3056] HEARTBEAT: Check Point Complete
11/02 19:01:59 [3056] <RegHeartbeatProc>Done, Heartbeat=32seconds
11/02 19:01:59 [3056] HeartbeatProcFailed to get profile with proxy setting 1
11/02 19:01:59 [3056] <CheckHeartbeatTimer>====== Heartbeat loop stops at 19:01:59 ======
11/02 19:02:14 [3216] <CSyLink::mfn_DownloadNow()>
11/02 19:02:14 [3216] </CSyLink::mfn_DownloadNow()>
11/02 19:02:32 [3056] <CheckHeartbeatTimer>====== Heartbeat loop starts at 19:02:32 ======
11/02 19:02:32 [3056] <GetOnlineNicInfo>:Netport Count=1
11/02 19:02:32 [3056] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.xx.xx" Mac="00-1b-98-b1-91-7a" Gateway="192.168.xx.xx" SubnetMask="0.0.0.0"/></SSANICs>
11/02 19:02:32 [3056] <CalcAgentHashKey>:CH=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
11/02 19:02:32 [3056] <CalcAgentHashKey>:CHKey=84ACE5ACDB5E7B49450A761225AE17C3
11/02 19:02:32 [3056] <CalcAgentHashKey>:C=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.org
11/02 19:02:32 [3056] <CalcAgentHashKey>:CKey=ACCB3D87332BCFE53EBCF21A23E55705
11/02 19:02:32 [3056] <CalcAgentHashKey>:UCH=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
11/02 19:02:32 [3056] <CalcAgentHashKey>:UCHKey=F071AC26371DB61904DBF7555664EA07
11/02 19:02:32 [3056] <CalcAgentHashKey>:UC=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.org
11/02 19:02:32 [3056] <CalcAgentHashKey>:UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
11/02 19:02:32 [3056] <DoHeartbeat>HardwareID=AF4876A83ACC58C5C2C804C0B910BF9E
11/02 19:02:32 [3056] <DoHeartbeat>CHKey=84ACE5ACDB5E7B49450A761225AE17C3
11/02 19:02:32 [3056] <DoHeartbeat>CKey=ACCB3D87332BCFE53EBCF21A23E55705
11/02 19:02:32 [3056] <DoHeartbeat>UCHKey=F071AC26371DB61904DBF7555664EA07
11/02 19:02:32 [3056] <DoHeartbeat>UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
11/02 19:02:32 [3056] <DoHeartbeat> Set heartbeat event
11/02 19:02:32 [3056] Use new configuration
11/02 19:02:32 [3056] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 19:02:32 ======
11/02 19:02:33 [3056] HEARTBEAT: Check Point 1
11/02 19:02:33 [3056] <GetFirstSEMServer> Selecting a random server
11/02 19:02:33 [3056] <GetFirstServer> Using server 'server.sophies.org'
11/02 19:02:33 [3056] HEARTBEAT: Check Point 2
11/02 19:02:33 [3056] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
11/02 19:02:33 [3056] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
11/02 19:02:33 [3056] HEARTBEAT: Check Point 3
11/02 19:02:33 [3056] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
11/02 19:02:33 [3056] HEARTBEAT: Check Point 4
11/02 19:02:33 [3056] <RegHeartbeatProc>===Registration STAGE===
11/02 19:02:33 [3056] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator
hello again
Is there anybody know how to fix this issue?
Hi
can you check if its resolving the name of your parent server
'server.sophies.org'
check your dns settings
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
hello
I can resolve the name.I can ping to that client and web access to that symantec endpoint manager console.I try with sylinkdrop too.But the green dot icon is not display in symantec endpoint protection client and symantec endpoint protection manager console.
Try: Click Start > Run, type
Try:
Click Start > Run, type Regedit, and then click OK.
Go to the following key:
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\InternetSettings
In the right pane, double-click GlobalUserOffline, then change the value to 0.
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
Try to change the
Try to change the communications settings from push mode to pull mode for the group
hello
I haven't seen any golbal user offline setting into the internet settings.My Symantec Endpoint Protection Manager is window xp and the problem machine is window xp too.Here is the sylink log files of problem machine.I already change push mode to pull mode for the group.
read error, exit
11/02 19:01:58 [3056] <ParseErrorCode:>12029=>The attempt to connect to the server failed.
11/02 19:01:58 [3056] <SendRegistrationRequest:>SMS return=0
11/02 19:01:58 [3056] <ParseHTTPStatusCode:>0=>Uninterpreted Status
11/02 19:01:58 [3056] <SendRegistrationRequest:>ERR to query content length
11/02 19:01:58 [3056] <SendRegistrationRequest:>Content Lenght =>
11/02 19:01:58 [3056] HTTP returns status code=0
11/02 19:01:58 [3056] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
11/02 19:01:58 [3056] <SendRegistrationRequest:>COMPLETED, returned 5
11/02 19:01:58 [3056] HEARTBEAT: Check Point 5.1
11/02 19:01:58 [3056] <ScheduleNextUpdate>new scheduled heartbeat=32 seconds
11/02 19:01:58 [3056] HEARTBEAT: Check Point 8
11/02 19:01:58 [3056] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
11/02 19:01:58 [3056] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
11/02 19:01:58 [3056] <RegHeartbeatProc>====== Registration Procedure stops at 19:01:58 ======
11/02 19:01:58 [3056] HEARTBEAT: Check Point 10
11/02 19:01:59 [3056] HEARTBEAT: Check Point Complete
11/02 19:01:59 [3056] <RegHeartbeatProc>Done, Heartbeat=32seconds
11/02 19:01:59 [3056] HeartbeatProcFailed to get profile with proxy setting 1
11/02 19:01:59 [3056] <CheckHeartbeatTimer>====== Heartbeat loop stops at 19:01:59 ======
11/02 19:02:14 [3216] <CSyLink::mfn_DownloadNow()>
11/02 19:02:14 [3216] </CSyLink::mfn_DownloadNow()>
11/02 19:02:32 [3056] <CheckHeartbeatTimer>====== Heartbeat loop starts at 19:02:32 ======
11/02 19:02:32 [3056] <GetOnlineNicInfo>:Netport Count=1
11/02 19:02:32 [3056] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.xx.xx" Mac="00-1b-98-b1-91-7a" Gateway="192.168.xx.xx" SubnetMask="0.0.0.0"/></SSANICs>
11/02 19:02:32 [3056] <CalcAgentHashKey>:CH=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
11/02 19:02:32 [3056] <CalcAgentHashKey>:CHKey=84ACE5ACDB5E7B49450A761225AE17C3
11/02 19:02:32 [3056] <CalcAgentHashKey>:C=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.org
11/02 19:02:32 [3056] <CalcAgentHashKey>:CKey=ACCB3D87332BCFE53EBCF21A23E55705
11/02 19:02:32 [3056] <CalcAgentHashKey>:UCH=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
11/02 19:02:32 [3056] <CalcAgentHashKey>:UCHKey=F071AC26371DB61904DBF7555664EA07
11/02 19:02:32 [3056] <CalcAgentHashKey>:UC=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.org
11/02 19:02:32 [3056] <CalcAgentHashKey>:UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
11/02 19:02:32 [3056] <DoHeartbeat>HardwareID=AF4876A83ACC58C5C2C804C0B910BF9E
11/02 19:02:32 [3056] <DoHeartbeat>CHKey=84ACE5ACDB5E7B49450A761225AE17C3
11/02 19:02:32 [3056] <DoHeartbeat>CKey=ACCB3D87332BCFE53EBCF21A23E55705
11/02 19:02:32 [3056] <DoHeartbeat>UCHKey=F071AC26371DB61904DBF7555664EA07
11/02 19:02:32 [3056] <DoHeartbeat>UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
11/02 19:02:32 [3056] <DoHeartbeat> Set heartbeat event
11/02 19:02:32 [3056] Use new configuration
11/02 19:02:32 [3056] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 19:02:32 ======
11/02 19:02:33 [3056] HEARTBEAT: Check Point 1
11/02 19:02:33 [3056] <GetFirstSEMServer> Selecting a random server
11/02 19:02:33 [3056] <GetFirstServer> Using server 'server.sophies.org'
11/02 19:02:33 [3056] HEARTBEAT: Check Point 2
11/02 19:02:33 [3056] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
11/02 19:02:33 [3056] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
11/02 19:02:33 [3056] HEARTBEAT: Check Point 3
11/02 19:02:33 [3056] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
11/02 19:02:33 [3056] HEARTBEAT: Check Point 4
11/02 19:02:33 [3056] <RegHeartbeatProc>===Registration STAGE===
11/02 19:02:33 [3056] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator
Windows XP have the
Windows XP have the limitation of concurrent TCP connections
.It can handle only 10 concurrent connections at a time. So make all your pcs
to pull mode (push mode will keep a connection always open with its clients)
make the heartbeat inter well to 1 hour and randomize it to 5 min and try...
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
Also try to do a iisreset on the server
Also try to do a iisreset on the machine which has the SEPM
Then Right click on the client which has issues and click on Update policy
Also check the proxy on IE try to disable it and check if present
No connection address
The SylinkLog you posted does not show what the client is trying to connect to. Could you add that part?
Here is Sylink Logfiles
11/02 19:01:37 [3056] <ParseErrorCode:>12029=>The attempt to connect to the server failed.
11/02 19:01:37 [3056] <SendRegistrationRequest:>SMS return=0
11/02 19:01:37 [3056] <ParseHTTPStatusCode:>0=>Uninterpreted Status
11/02 19:01:37 [3056] <SendRegistrationRequest:>ERR to query content length
11/02 19:01:37 [3056] <SendRegistrationRequest:>Content Lenght =>
11/02 19:01:37 [3056] HTTP returns status code=0
11/02 19:01:37 [3056] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
11/02 19:01:37 [3056] <SendRegistrationRequest:>COMPLETED, returned 5
11/02 19:01:37 [3056] HEARTBEAT: Check Point 5.1
11/02 19:01:37 [3056] <RegHeartbeatProc>switch to another server
11/02 19:01:37 [3056] HEARTBEAT: Check Point 9
11/02 19:01:37 [3056] HEARTBEAT: Check Point 8
11/02 19:01:37 [3056] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
11/02 19:01:37 [3056] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
11/02 19:01:37 [3056] HEARTBEAT: Check Point 1
11/02 19:01:37 [3056] HEARTBEAT: Check Point 2
11/02 19:01:37 [3056] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
11/02 19:01:37 [3056] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
11/02 19:01:37 [3056] HEARTBEAT: Check Point 3
11/02 19:01:37 [3056] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
11/02 19:01:37 [3056] HEARTBEAT: Check Point 4
11/02 19:01:37 [3056] <RegHeartbeatProc>===Registration STAGE===
11/02 19:01:37 [3056] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator
read error, exit
11/02 19:01:58 [3056] <ParseErrorCode:>12029=>The attempt to connect to the server failed.
11/02 19:01:58 [3056] <SendRegistrationRequest:>SMS return=0
11/02 19:01:58 [3056] <ParseHTTPStatusCode:>0=>Uninterpreted Status
11/02 19:01:58 [3056] <SendRegistrationRequest:>ERR to query content length
11/02 19:01:58 [3056] <SendRegistrationRequest:>Content Lenght =>
11/02 19:01:58 [3056] HTTP returns status code=0
11/02 19:01:58 [3056] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
11/02 19:01:58 [3056] <SendRegistrationRequest:>COMPLETED, returned 5
11/02 19:01:58 [3056] HEARTBEAT: Check Point 5.1
11/02 19:01:58 [3056] <ScheduleNextUpdate>new scheduled heartbeat=32 seconds
11/02 19:01:58 [3056] HEARTBEAT: Check Point 8
11/02 19:01:58 [3056] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
11/02 19:01:58 [3056] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
11/02 19:01:58 [3056] <RegHeartbeatProc>====== Registration Procedure stops at 19:01:58 ======
11/02 19:01:58 [3056] HEARTBEAT: Check Point 10
11/02 19:01:59 [3056] HEARTBEAT: Check Point Complete
11/02 19:01:59 [3056] <RegHeartbeatProc>Done, Heartbeat=32seconds
11/02 19:01:59 [3056] HeartbeatProcFailed to get profile with proxy setting 1
11/02 19:01:59 [3056] <CheckHeartbeatTimer>====== Heartbeat loop stops at 19:01:59 ======
11/02 19:02:14 [3216] <CSyLink::mfn_DownloadNow()>
11/02 19:02:14 [3216] </CSyLink::mfn_DownloadNow()>
11/02 19:02:32 [3056] <CheckHeartbeatTimer>====== Heartbeat loop starts at 19:02:32 ======
11/02 19:02:32 [3056] <GetOnlineNicInfo>:Netport Count=1
11/02 19:02:32 [3056] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.xx.xx" Mac="00-1e-92-b1-82-8a" Gateway="192.168.xx.xxx" SubnetMask="0.0.0.0"/></SSANICs>
11/02 19:02:32 [3056] <CalcAgentHashKey>:CH=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
11/02 19:02:32 [3056] <CalcAgentHashKey>:CHKey=84ACE5ACDB5E7B49450A761225AE17C3
11/02 19:02:32 [3056] <CalcAgentHashKey>:C=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.org
11/02 19:02:32 [3056] <CalcAgentHashKey>:CKey=ACCB3D87332BCFE53EBCF21A23E55705
11/02 19:02:32 [3056] <CalcAgentHashKey>:UCH=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
11/02 19:02:32 [3056] <CalcAgentHashKey>:UCHKey=F071AC26371DB61904DBF7555664EA07
11/02 19:02:32 [3056] <CalcAgentHashKey>:UC=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.org
11/02 19:02:32 [3056] <CalcAgentHashKey>:UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
11/02 19:02:32 [3056] <DoHeartbeat>HardwareID=AF4876A83ACC58C5C2C804C0B910BF9E
11/02 19:02:32 [3056] <DoHeartbeat>CHKey=84ACE5ACDB5E7B49450A761225AE17C3
11/02 19:02:32 [3056] <DoHeartbeat>CKey=ACCB3D87332BCFE53EBCF21A23E55705
11/02 19:02:32 [3056] <DoHeartbeat>UCHKey=F071AC26371DB61904DBF7555664EA07
11/02 19:02:32 [3056] <DoHeartbeat>UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
11/02 19:02:32 [3056] <DoHeartbeat> Set heartbeat event
11/02 19:02:32 [3056] Use new configuration
11/02 19:02:32 [3056] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 19:02:32 ======
11/02 19:02:33 [3056] HEARTBEAT: Check Point 1
11/02 19:02:33 [3056] <GetFirstSEMServer> Selecting a random server
11/02 19:02:33 [3056] <GetFirstServer> Using server 'mimas.sophies.org'
11/02 19:02:33 [3056] HEARTBEAT: Check Point 2
11/02 19:02:33 [3056] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
11/02 19:02:33 [3056] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
11/02 19:02:33 [3056] HEARTBEAT: Check Point 3
11/02 19:02:33 [3056] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
11/02 19:02:33 [3056] HEARTBEAT: Check Point 4
11/02 19:02:33 [3056] <RegHeartbeatProc>===Registration STAGE===
11/02 19:02:33 [3056] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator
read error, exit
11/02 19:02:54 [3056] <ParseErrorCode:>12029=>The attempt to connect to the server failed.
11/02 19:02:54 [3056] <SendRegistrationRequest:>SMS return=0
11/02 19:02:54 [3056] <ParseHTTPStatusCode:>0=>Uninterpreted Status
11/02 19:02:54 [3056] <SendRegistrationRequest:>ERR to query content length
11/02 19:02:54 [3056] <SendRegistrationRequest:>Content Lenght =>
11/02 19:02:54 [3056] HTTP returns status code=0
11/02 19:02:54 [3056] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
11/02 19:02:54 [3056] <SendRegistrationRequest:>COMPLETED, returned 5
11/02 19:02:54 [3056] HEARTBEAT: Check Point 5.1
11/02 19:02:54 [3056] <RegHeartbeatProc>switch to another server
11/02 19:02:54 [3056] HEARTBEAT: Check Point 9
11/02 19:02:54 [3056] HEARTBEAT: Check Point 8
11/02 19:02:54 [3056] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
11/02 19:02:54 [3056] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
11/02 19:02:55 [3056] HEARTBEAT: Check Point 1
11/02 19:02:55 [3056] HEARTBEAT: Check Point 2
11/02 19:02:55 [3056] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
11/02 19:02:55 [3056] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
11/02 19:02:55 [3056] HEARTBEAT: Check Point 3
11/02 19:02:55 [3056] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
11/02 19:02:55 [3056] HEARTBEAT: Check Point 4
11/02 19:02:55 [3056] <RegHeartbeatProc>===Registration STAGE===
11/02 19:02:55 [3056] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator
read error, exit
11/02 19:03:14 [3216] <CSyLink::mfn_DownloadNow()>
11/02 19:03:14 [3216] </CSyLink::mfn_DownloadNow()>
11/02 19:03:16 [3056] <ParseErrorCode:>12029=>The attempt to connect to the server failed.
11/02 19:03:16 [3056] <SendRegistrationRequest:>SMS return=0
11/02 19:03:16 [3056] <ParseHTTPStatusCode:>0=>Uninterpreted Status
11/02 19:03:16 [3056] <SendRegistrationRequest:>ERR to query content length
11/02 19:03:16 [3056] <SendRegistrationRequest:>Content Lenght =>
11/02 19:03:16 [3056] HTTP returns status code=0
11/02 19:03:16 [3056] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
11/02 19:03:16 [3056] <SendRegistrationRequest:>COMPLETED, returned 5
11/02 19:03:16 [3056] HEARTBEAT: Check Point 5.1
11/02 19:03:16 [3056] <ScheduleNextUpdate>new scheduled heartbeat=64 seconds
11/02 19:03:16 [3056] HEARTBEAT: Check Point 8
11/02 19:03:16 [3056] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
11/02 19:03:16 [3056] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
11/02 19:03:16 [3056] <RegHeartbeatProc>====== Registration Procedure stops at 19:03:16 ======
11/02 19:03:16 [3056] HEARTBEAT: Check Point 10
11/02 19:03:16 [3056] HEARTBEAT: Check Point Complete
11/02 19:03:16 [3056] <RegHeartbeatProc>Done, Heartbeat=64seconds
11/02 19:03:16 [3056] HeartbeatProcFailed to get profile with proxy setting 2
11/02 19:03:16 [3056] <CheckHeartbeatTimer>====== Heartbeat loop stops at 19:03:16 ======
11/02 19:04:14 [3216] <CSyLink::mfn_DownloadNow()>
11/02 19:04:14 [3216] </CSyLink::mfn_DownloadNow()>
11/02 19:04:21 [3056] <CheckHeartbeatTimer>====== Heartbeat loop starts at 19:04:21 ======
11/02 19:04:22 [3056] <GetOnlineNicInfo>:Netport Count=1
11/02 19:04:22 [3056] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.xx.xx" Mac="00-1e-92-b1-82-8a" Gateway="192.168.xx.xxx" SubnetMask="0.0.0.0"/></SSANICs>
11/02 19:04:22 [3056] <CalcAgentHashKey>:CH=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
11/02 19:04:22 [3056] <CalcAgentHashKey>:CHKey=84ACE5ACDB5E7B49450A761225AE17C3
11/02 19:04:22 [3056] <CalcAgentHashKey>:C=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.org
11/02 19:04:22 [3056] <CalcAgentHashKey>:CKey=ACCB3D87332BCFE53EBCF21A23E55705
11/02 19:04:22 [3056] <CalcAgentHashKey>:UCH=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
11/02 19:04:22 [3056] <CalcAgentHashKey>:UCHKey=F071AC26371DB61904DBF7555664EA07
11/02 19:04:22 [3056] <CalcAgentHashKey>:UC=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.org
11/02 19:04:22 [3056] <CalcAgentHashKey>:UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
11/02 19:04:22 [3056] <DoHeartbeat>HardwareID=AF4876A83ACC58C5C2C804C0B910BF9E
11/02 19:04:22 [3056] <DoHeartbeat>CHKey=84ACE5ACDB5E7B49450A761225AE17C3
11/02 19:04:22 [3056] <DoHeartbeat>CKey=ACCB3D87332BCFE53EBCF21A23E55705
11/02 19:04:22 [3056] <DoHeartbeat>UCHKey=F071AC26371DB61904DBF7555664EA07
11/02 19:04:22 [3056] <DoHeartbeat>UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
11/02 19:04:22 [3056] <DoHeartbeat> Set heartbeat event
11/02 19:04:22 [3056] Use new configuration
11/02 19:04:22 [3056] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 19:04:22 ======
11/02 19:04:22 [3056] HEARTBEAT: Check Point 1
11/02 19:04:22 [3056] <GetFirstSEMServer> Selecting a random server
11/02 19:04:22 [3056] <GetFirstServer> Using server 'mimas.sophies.org'
11/02 19:04:22 [3056] HEARTBEAT: Check Point 2
11/02 19:04:22 [3056] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
11/02 19:04:22 [3056] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
11/02 19:04:22 [3056] HEARTBEAT: Check Point 3
11/02 19:04:22 [3056] mfn_CreateInetSession: Session is NULL for 'no proxy' setting .. Communication id bound to FAIL..
11/02 19:04:22 [3056] Throw Internet Exception, Error Code=0;AH: failed to open internet.
11/02 19:04:22 [3056] CInternetException: <RegHeartbeatProc>: The operation completed successfully.
11/02 19:04:22 [3056] <ScheduleNextUpdate>Manually assigned heartbeat=1 seconds
11/02 19:04:22 [3056] <RegHeartbeatProc>====== Registration Procedure stops at 19:04:22 ======
11/02 19:04:22 [3056] HEARTBEAT: Check Point 10
11/02 19:04:23 [3056] HEARTBEAT: Check Point Complete
11/02 19:04:23 [3056] <RegHeartbeatProc>Done, Heartbeat=1seconds
11/02 19:04:23 [3056] HeartbeatProcFailed to get profile with proxy setting 3
11/02 19:04:23 [3056] <CheckHeartbeatTimer>====== Heartbeat loop stops at 19:04:23 ======
11/02 19:04:25 [3056] <CheckHeartbeatTimer>====== Heartbeat loop starts at 19:04:25 ======
11/02 19:04:25 [3056] <GetOnlineNicInfo>:Netport Count=1
11/02 19:04:25 [3056] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.xx.xx" Mac="00-1e-92-b1-82-8a" Gateway="192.168.xx.xxx" SubnetMask="0.0.0.0"/></SSANICs>
11/02 19:04:25 [3056] <CalcAgentHashKey>:CH=B5664FC0C0A8592100B2E9BE24F6F4C41poolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
11/02 19:04:25 [3056] <CalcAgentHashKey>:CHKey=84ACE5ACDB5E7B49450A761225AE17C3
11/02 19:04:25 [3056] <CalcAgentHashKey>:C=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.org
11/02 19:04:25 [3056] <CalcAgentHashKey>:CKey=ACCB3D87332BCFE53EBCF21A23E55705
11/02 19:04:25 [3056] <CalcAgentHashKey>:UCH=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
11/02 19:04:25 [3056] <CalcAgentHashKey>:UCHKey=F071AC26371DB61904DBF7555664EA07
11/02 19:04:25 [3056] <CalcAgentHashKey>:UC=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.org
11/02 19:04:25 [3056] <CalcAgentHashKey>:UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
11/02 19:04:25 [3056] <DoHeartbeat>HardwareID=AF4876A83ACC58C5C2C804C0B910BF9E
11/02 19:04:25 [3056] <DoHeartbeat>CHKey=84ACE5ACDB5E7B49450A761225AE17C3
11/02 19:04:25 [3056] <DoHeartbeat>CKey=ACCB3D87332BCFE53EBCF21A23E55705
11/02 19:04:25 [3056] <DoHeartbeat>UCHKey=F071AC26371DB61904DBF7555664EA07
11/02 19:04:25 [3056] <DoHeartbeat>UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
11/02 19:04:25 [3056] <DoHeartbeat> Set heartbeat event
11/02 19:04:25 [3056] Use new configuration
11/02 19:04:25 [3056] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 19:04:25 ======
11/02 19:04:26 [3056] HEARTBEAT: Check Point 1
11/02 19:04:26 [3056] <GetFirstSEMServer> Selecting a random server
11/02 19:04:26 [3056] <GetFirstServer> Using server '192.168.xx.xx'
11/02 19:04:26 [3056] HEARTBEAT: Check Point 2
11/02 19:04:26 [3056] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
11/02 19:04:26 [3056] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
11/02 19:04:26 [3056] HEARTBEAT: Check Point 3
11/02 19:04:26 [3056] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
11/02 19:04:26 [3056] HEARTBEAT: Check Point 4
11/02 19:04:26 [3056] <RegHeartbeatProc>===Registration STAGE===
11/02 19:04:26 [3056] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator
read error, exit
Please help me if everybody have time.
Check these possibilities
Since you are using windows XP as server you are having a
limitation in no. of concurrent TCP connections. For this you can do two things
1. Make all your clients
to pull mode (push mode will keep a connection always open
with its clients)
make the heartbeat inter well to 1 hour and randomize it to
5 min.
2.Decrease the auto disconnect timeout using net config
server /autodisconnect:time_before_autodisconnect command (Specify the time in
minutes.)
ref: http://support.microsoft.com/kb/314882
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
Agree with AravindKM
The Sylink log shows you are not able to even open a connection. This could be caused Windows XP connection limitation.
Try AravindKM's suggestions. If you have a lot of clients, you may want to move the SEPM to a machine with a Server OS.
Remove Registry Keys
Have managed to sort my issue regarding clients not connecting to SEPM and showing a green dot on the Endpoint Shield.
After trying to replace the Sylink file on local machines I tried to removing two registry keys on the local machine.
Open regedt32,
Browse to
MyComputer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections and export the connections folder to a memorable location.
This is incase there is an error after registry edit. I myself didn't backup the registry but obviously it is a good idea.
Then browse to
MyComputer\HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections and delete the following keys.
DefaultConnectionSettings
SavedLegacySettings
Then reboot.
Regards Chris Kellow
Try
Try this:
http://service1.symantec.com/support/ent-security....
Endpoint Knowledge Base
Security Best Practices
Fix IT
Hello All
Thank you for who helping me.I am so happy to fix this problem.I try Brannel01 it really helpful.Thank you all.
Would you like to reply?
Login or Register to post your comment.