Endpoint Protection

Hi,

I have a SEPM 11.0.5502.33(RU5)and over a 1000 clients,

On the SEP Manager home page, In the Status summary box, "Tamper protection off" section has 84 clients against it; although when i checked on the clients, Tamper Protection is showing ON. This issue started all of a sudden and started listing clients in different groups. All the systems are 32 bit clients running on windows XP.

Is this a reporting issue,if so, how to solve it?

Any help will be much appreciated.

You are on an old version. Latest for 11.x is RU7 MP2. Latest for 12.1 is RU1 MP1.

You could try running a repair on one of the clients to test it out and see what the result is.

Hello,

Check these Threads: 

https://www-secure.symantec.com/connect/forums/how-turn-tamper-protection

https://www-secure.symantec.com/connect/forums/how-clear-tamper-protection-disabled-status-notifications

Secondly, I would suggest you to migrate the SEP clients to the latest version of SEP 11.0.7101 and above.

Hope this helps!!

You can upgrade SEP Version to latest version.

SEPM 11.0.5502.33(RU5) Currently there is no option to  clear Tamper protection off status notification in the home page

I don't have any 64-bit clients in my network, I double checked the affected clients,all of them are 32-bit.

Upgradation is a last resort option,right now.

Can anyone tell me why this is happening

Hi,

I think this is old logs when you can't apply Tamper Protection policy in SEP 11 Client.

and SEP RU5 there is no option to clear Tamper protection status notification in the home page.

Please upgrade to SEP 12.1 RU1 MP1 which has many issues fixed...

Regards

Hi Sameer,

We can't upgrade SEPM 11.0.5502.33(RU5) to SEP 12.1 RU1 MP1.

Please check Upgrade path

http://www.symantec.com/connect/articles/supported-upgrade-paths-symantec-endpoint-protection-121

Hello,

I encounter a problem like yours.

My company wasn't ready to upgrade, then I had to find another solution !

The problem was on duplicate clients. I found it with reportings and log view, you could try to get a full log on

All client, with no other options.

Then, export it as .csv file and open it with Ecxel or another soft like it.

You will find a large amount of information about each client, so you will be able to find witch give their temper protection status as off.

Chears.

Olivier.

I am seeing the same issue - clients show tamper protection is on, but SEPM reports the same clients as "tamper protection off"

My version is 11.07 MP2.

Are there any logs on the clients that will show the true state of TP?

Thanks

Hi,

Issue on same set of clients or random clients.