Endpoint Protection

 View Only
  • 1.  Symantec Threat Reporter agents hanging

    Posted Apr 07, 2009 04:09 AM
    Our Symantec Threat Reporter occassionally reports that its agents are hanging (2 to 4 at times). We keep on receiving alerts from time to time and it's starting to get annoying. We get alerts at least every 10 minutes and then will go away after a few minutes of doing nothing. What must we check and do to make it run smoothly. We're currently monitoring 19 SAV 10 servers and we want to make sure everything on our side works before migrating to SEP 11.


  • 2.  RE: Symantec Threat Reporter agents hanging

    Posted Apr 13, 2009 11:50 AM
    Please enable tracing on agents hanging constanly and check the logs. We receive hanging agents when the CheckAgent status didnt receive any updates from the collectors.


  • 3.  RE: Symantec Threat Reporter agents hanging

    Posted Apr 22, 2009 11:45 PM
    My point is, the company has a bandwidth that would allow me to stream videos without freezing (<-- just a comparison) and yet the agents which is probably only sending a few lines of instructions would be delayed and result in them "hanging".
    These agents are connected to the reporter 24 x 7 and I've monitored the bandwidth usage and it's less than 3% most of the time.


  • 4.  RE: Symantec Threat Reporter agents hanging

    Posted Apr 23, 2009 02:17 PM
    Please refer to my first post, double check the logs of the hanging agents, if the time completed/duration of the agent is higher than the warn time, then it is really hanging. And then if you enable tracing, it will log all events.


  • 5.  RE: Symantec Threat Reporter agents hanging

    Posted Apr 23, 2009 10:09 PM
    Import agent takes 40secs on average. Which logs should I specifically check?


  • 6.  RE: Symantec Threat Reporter agents hanging

    Posted May 11, 2009 05:15 AM
    This depends on the hanging logs, if the agent completes then it is not hanging.