Endpoint Protection

 View Only

  • 1.  Two servers are alternatively coming on console of SEPM 12.1

    Posted Sep 05, 2013 06:43 AM

    Hi,

    We have SEPM 12.1 on windows 2008 server.Everything is fine with all the SEP clients except two clients(client01 and client02) running on Windows 2008 servers.

    When one client is displayed online on manager console, other one is missing and vice versa.These two client appear alternatively on manager console. Both have different IP addresses and both are upadating properly. Client02 full scan date is showing as March 4, 2013 which is very old date and also not as per scan policy.

    Could you please help us to know the reason behind it?



  • 2.  RE: Two servers are alternatively coming on console of SEPM 12.1

    Posted Sep 05, 2013 08:38 AM

    What's the exact version of 12.1 that you're running?

    Do both clients show the green dot on the icon in the task tray?



  • 3.  RE: Two servers are alternatively coming on console of SEPM 12.1

    Posted Sep 05, 2013 10:08 AM

    It's version is SEP 12.1 RU1 MP2

    And yes both the clients show green dot but on manager server console they come intermittantly.



  • 4.  RE: Two servers are alternatively coming on console of SEPM 12.1

    Posted Sep 05, 2013 10:39 AM

    I believe this was fixed in 12.1 RU2 MP1 per the release notes fix here:

    Clients report to the Symantec Endpoint Protection Manager as offline, even though they are online
    Fix ID: 3002170
    Symptom: Clients will randomly report into the Symantec Endpoint Protection Manager as offline, even though they are actively online and available.
    Solution: Updated the client USN management to properly update the client status in the Symantec Endpoint Protection Manager reports.
     
    I would suggest upgrading to the latest version 12.1 RU3


  • 5.  RE: Two servers are alternatively coming on console of SEPM 12.1

    Posted Sep 05, 2013 02:54 PM

    Thats because they have duplicate hardware ID. Delete the hardware id and restart sep service

    Duplicate Hardware IDs result in only one client showing up in the Symantec Endpoint Protection Manager for multiple systems

     

    http://www.symantec.com/business/support/index?page=content&id=TECH97626



  • 6.  RE: Two servers are alternatively coming on console of SEPM 12.1

    Broadcom Employee
    Posted Sep 05, 2013 03:29 PM

    Hi,

    Thank you for posting in Symantec community.

    I would be glad to answer your query.

    It might be happening due to duplicate hardware id.You should perform the steps given in the following article.

    How to repair duplicate IDs on cloned Symantec Endpoint Protection 12.1 clients

    http://www.symantec.com/business/support/index?page=content&id=TECH163349