Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Tamper Protection showing off in SEPM 11

Created: 22 Aug 2012 | 10 comments

Hi,

I have a SEPM 11.0.5502.33(RU5)and over a 1000 clients,

On the SEP Manager home page, In the Status summary box, "Tamper protection off" section has 84 clients against it; although when i checked on the clients, Tamper Protection is showing ON. This issue started all of a sudden and started listing clients in different groups. All the systems are 32 bit clients running on windows XP.

Is this a reporting issue,if so, how to solve it?

Any help will be much appreciated.

Comments 10 CommentsJump to latest comment

.Brian's picture

You are on an old version. Latest for 11.x is RU7 MP2. Latest for 12.1 is RU1 MP1.

You could try running a repair on one of the clients to test it out and see what the result is.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Mithun Sanghavi's picture

Hello,

Check these Threads: 

https://www-secure.symantec.com/connect/forums/how-turn-tamper-protection

https://www-secure.symantec.com/connect/forums/how-clear-tamper-protection-disabled-status-notifications

Secondly, I would suggest you to migrate the SEP clients to the latest version of SEP 11.0.7101 and above.

Hope this helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Ashish-Sharma's picture

You can upgrade SEP Version to latest version.

SEPM 11.0.5502.33(RU5) Currently there is no option to  clear Tamper protection off status notification in the home page

Thanks In Advance

Ashish Sharma

 

 

Rusty.J's picture

I don't have any 64-bit clients in my network, I double checked the affected clients,all of them are 32-bit.

Upgradation is a last resort option,right now.

Can anyone tell me why this is happening

Regards;

Rusty

Ashish-Sharma's picture

Hi,

I think this is old logs when you can't apply Tamper Protection policy in SEP 11 Client.

and SEP RU5 there is no option to clear Tamper protection status notification in the home page.

Thanks In Advance

Ashish Sharma

 

 

SameerU's picture

Please upgrade to SEP 12.1 RU1 MP1 which has many issues fixed...

Regards

 

Ashish-Sharma's picture

Hi Sameer,

We can't upgrade SEPM 11.0.5502.33(RU5) to SEP 12.1 RU1 MP1.

Please check Upgrade path

http://www.symantec.com/connect/articles/supported-upgrade-paths-symantec-endpoint-protection-121

Thanks In Advance

Ashish Sharma

 

 

Olivier_C's picture

Hello,

 

I encounter a problem like yours.

My company wasn't ready to upgrade, then I had to find another solution !

 

The problem was on duplicate clients. I found it with reportings and log view, you could try to get a full log on

All client, with no other options.

Then, export it as .csv file and open it with Ecxel or another soft like it.

You will find a large amount of information about each client, so you will be able to find witch give their temper protection status as off.

 

Chears.

 

Olivier.

~~~~~~~~~~~~

Olivier

grumbleweed's picture

I am seeing the same issue - clients show tamper protection is on, but SEPM reports the same clients as "tamper protection off"

My version is 11.07 MP2.

Are there any logs on the clients that will show the true state of TP?

Thanks

Riya31's picture

Hi,

Issue on same set of clients or random clients.