Endpoint Protection

 View Only
Back to discussions
Expand all | Collapse all

User information not showing

Migration User

Migration UserNov 29, 2010 11:57 PM

These setting are not working still ,,,,
Migration User

Migration UserNov 30, 2010 01:29 AM

pete plz look in sylink logs,,,
Migration User

Migration UserNov 30, 2010 08:12 AMBest Answer

Problem has been resolve by installation RU5

  • 1.  User information not showing

    Posted Nov 29, 2010 09:27 AM

    Hi guys,

    I hope you all will be  fine,

    My problem is;

     

    In sepm console , in properties of user , user info does not show,

    I mean i need to fine computer by Cell phone but wheni check user info it shows blank in all information tab,even though i have put information at client after client package installation.

     



  • 2.  RE: User information not showing

    Posted Nov 29, 2010 09:44 AM

    this should be entered by the client side; you need to enable the setting to collect user details option; once entered by the user , u will see it here



  • 3.  RE: User information not showing

    Posted Nov 29, 2010 10:02 AM

    To enable for a specific package go to:

    Admin tab

    Install Packages

    Client Install Package

    Select the package you want to enable this for

    Under Tasks, select Set User Information Collection

    Tick the box for Collect User Information

    Customise to your liking and click OK

    Assign package to group or deploy with a method to your liking



  • 4.  RE: User information not showing

    Posted Nov 29, 2010 11:44 AM

    I already enable  these option and entr the information at client but information still not showing



  • 5.  RE: User information not showing

    Posted Nov 29, 2010 11:55 AM

    Has the client checked in to the SEPM since you entered the info? What is the heartbeat set to?



  • 6.  RE: User information not showing

    Posted Nov 29, 2010 11:57 AM

    all things are at default,,

     

    what is mean by client has checked



  • 7.  RE: User information not showing

    Posted Nov 29, 2010 12:07 PM

    When the Client will upload its logs to SEPM this info should come up..



  • 8.  RE: User information not showing

    Posted Nov 29, 2010 12:27 PM

    If it's set to default, I believe the heartbeat is 4 hours. So it sounds like the client has not yet checked in with the SEPM since you made the change. The client will check in every 4 hours and upload logs, download policies, etc.

    To check the heartbeat time, do the following:

    Go to Clients tab

    Select a group

    Go to Policies tab up at the top

    Under Settings, select Communications Settings

    The Heartbeat Interval is right in the middle of the box. You can adjust as you see fit.

    Check this for further detail:

    How to configure the heartbeat frecuency

    http://www.symantec.com/business/support/index?page=content&id=HOWTO32612&actp=search&viewlocale=es_ES&searchid=1291051584171



  • 9.  RE: User information not showing

    Posted Nov 29, 2010 11:57 PM

    These setting are not working still ,,,,

     



  • 10.  RE: User information not showing

    Posted Nov 30, 2010 12:11 AM

    Is option " set user information collection" work in domain ?

     

    I am using this option in work group but not workig



  • 11.  RE: User information not showing

    Broadcom Employee
    Posted Nov 30, 2010 12:14 AM

    does the client communicating with the SEPM? can you post the sylink logs from the client?



  • 12.  RE: User information not showing

    Posted Nov 30, 2010 12:33 AM

    Communication between SEPM server and SEP client is fine, No issue between communication,,

     

    how to get sylink log



  • 13.  RE: User information not showing

    Broadcom Employee


  • 14.  RE: User information not showing

    Posted Nov 30, 2010 01:19 AM

    11/30 11:16:50 [5412] ~~~Sylink log started. (SEP Product Version in registry: 11.0.6005.562, Sylink File Version: 11.0.6005.440)
    11/30 11:16:50 [5412] Stored HostGUID=6777D2DAC0A8016F00EA3B86887823CB; outlen=16
    11/30 11:16:50 [5412] <RestoreSettings>Stored UserGuid=0; outlen=2
    11/30 11:16:50 [5412] <mfn_DecodeSSN>Sygate-SSN=153
    11/30 11:16:50 [5412] <mfn_DecodeSSN>Read CSN=154
    11/30 11:16:50 [5412] <mfn_DecodeSSN>Sygate-SSN=10
    11/30 11:16:50 [5412] <mfn_DecodeSSN>Read CSN=11
    11/30 11:16:50 [5412] Product Type=3,Major Ver=5,Minor Ver=2,Platform ID=34,OSType=50659874
    11/30 11:16:50 [5412] OS=Windows Server 2003 family Enterprise Edition; number=5.2.3790
    11/30 11:16:50 [5412] SyLinkCreateInstance => Instance created: 01BE1F30 Registry path: SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK
    11/30 11:16:50 [5412] <GetOnlineNicInfo>:Netport Count=3
    11/30 11:16:50 [5412] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.1.111" Mac="00-0d-56-1f-50-44" Gateway="192.168.1.1" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.102.1" Mac="00-50-56-c0-00-01" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.243.1" Mac="00-50-56-c0-00-08" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/></SSANICs>
    11/30 11:16:50 [5412] SyLinkCreateConfig => Created instance: 01BC7EC0
    11/30 11:16:50 [5412] UseNewConfig => Created m_hNewConfig: 01BC7EC0
    11/30 11:16:50 [5412] Importing ConfigObject: 01BC30E0 into: 01BC7EC0
    11/30 11:16:50 [5412] Importing ConfigObject: 01BC30E0 into: 01BC5390
    11/30 11:16:50 [5412] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    11/30 11:16:50 [5412] SSA packageType is set as 105
    11/30 11:16:50 [5412] SyLinkDeleteConfig => Deleting instance: 01BC30E0
    11/30 11:16:50 [5412] <SetHiStatus>HI status is changed to=3; reason=105; rule=Host Integrity check is disabled.
     Host Integrity policy has been disabled by the administrator.
    11/30 11:16:53 [5412] SyLinkCreateConfig => Created instance: 0380B268
    11/30 11:16:53 [5412] SetCurLocationName: Name is set to - Default
    11/30 11:16:53 [5412] SetCurLocationID: ID is set to - D7983A3DC0A8016F0157BAAE3709E524
    11/30 11:16:53 [5412] SyLinkCreateConfig => Created instance: 03722CE8
    11/30 11:16:53 [5412] RemeberCurrentGroup=0,RememberCurrentPolicyMode=0
    11/30 11:16:53 [5412] Importing ConfigObject: 03722CE8 into: 01BC7EC0
    11/30 11:16:53 [5412] Importing ConfigObject: 03722CE8 into: 01BC5390
    11/30 11:16:53 [5412] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    11/30 11:16:53 [5412] SyLinkDeleteConfig => Deleting instance: 03722CE8
    11/30 11:16:53 [5412] SyLinkDeleteConfig => Deleting instance: 0380B268
    11/30 11:16:53 [5160] <ScheduleNextUpdate>Manually assigned heartbeat=1 seconds
    11/30 11:16:53 [1568] <ScheduleNextUpdate>Manually assigned heartbeat=1 seconds
    11/30 11:16:54 [5412] <CSyLink::Start()>
    11/30 11:16:54 [5412] <EncodeHelper::DecryptUrl>
    11/30 11:16:54 [5412] <CSyLink::Start> The last server used was '192.168.1.111'
    11/30 11:16:54 [5412] <CSyLink::ImportConfigFile()>
    11/30 11:16:54 [5412] CUpdateConfig::Dump
    <Client Package-Checksum: b6388acd7a9fcafe517ffac8165a2a44, DownloadStartTime: 0:0, DurationMin: 1439, RandomizeTime: 0>
    11/30 11:16:54 [5412] </CSyLink::ImportConfigFile()>
    11/30 11:16:55 [5412] ******Sid=S-1-5-21-2064782855-2830633017-3075401804-500
    11/30 11:16:55 [5412] <GetDomainHostName>NT user Name=
    11/30 11:16:55 [5412] <GetDomainHostName>NT domain Name=
    11/30 11:16:55 [5412] <GetDomainHostName>Current Login User Name=/
    11/30 11:16:55 [5412] <GetDomainHostName>use netbios to query computer domain name. IP and Host name are: 192.168.1.111abm007
    11/30 11:16:55 [5412] Got domain name using NetWkstaGetInfo
    11/30 11:16:55 [5412] <GetDomainHostName>Got domain name (using netbios) for IP 192.168.1.111
    11/30 11:16:55 [5412] <GetDomainHostName>computer domain name = WORKGROUP
    11/30 11:16:55 [5412] <GetDomainHostName>msz_DomainName is taken from szDomainName
    11/30 11:16:55 [5412] <GetDomainHostName>DomainName (Final)=WORKGROUP
    11/30 11:16:55 [5412] <HWID CSyLink::GetHardwareKey> Get Hardware ID
    11/30 11:17:01 [5412] <HWID CSyLink::GetHardwareKey> Hardware ID assigned: E882BA3B41F6CD2CD565205C626952B7
    11/30 11:17:02 [5412] <Start>Unable to create Session with 'User Proxy' settings - Proxy Server: Error Code: 87
    11/30 11:17:02 [5412] <Start>Unable to create Session with 'No Proxies' settings - Error Code: 87
    11/30 11:17:02 [5412] <CSyLink::LoadLUInfo> Previous LU data was not loaded or found
    11/30 11:17:02 [5260] <ScheduleNextUpdate>Manually assigned heartbeat=279 seconds
    11/30 11:17:02 [5304] <HeartbeatThreadProc:>Thread is about to begin..
    11/30 11:17:02 [5260] Successfully created the heartbeat thread
    11/30 11:17:02 [5412] <Start>Started, contact SMS every 300 seconds
    11/30 11:17:02 [5412] <PostEvent>going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    11/30 11:17:02 [5412] <PostEvent>done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0
    11/30 11:17:02 [5412] </CSyLink::Start()>
    11/30 11:17:02 [5304] <CheckHeartbeatTimer>====== Heartbeat loop starts at 11:17:02 ======
    11/30 11:17:03 [5304] <GetOnlineNicInfo>:Netport Count=3
    11/30 11:17:03 [5304] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.1.111" Mac="00-0d-56-1f-50-44" Gateway="192.168.1.1" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.102.1" Mac="00-50-56-c0-00-01" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.243.1" Mac="00-50-56-c0-00-08" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/></SSANICs>
    11/30 11:17:03 [5160] SyLinkCreateConfig => Created instance: 01ADEED0
    11/30 11:17:03 [5160] Importing ConfigObject: 01BC5390 into: 01ADEED0
    11/30 11:17:03 [5160] SyLinkDeleteConfig => Deleting instance: 01ADEED0
    11/30 11:17:04 [5412] <SetClientAuth>Received new User/Domain from SMC..  User: Administrator User Domain: ABM007
    11/30 11:17:04 [5412] <SetClientAuth>Getting RDNS Domain Name (user domain in AD setup)..
    11/30 11:17:04 [5412] <GetLoginRdnsDomain>DNS domain=
    11/30 11:17:04 [5412] <SetClientAuth>Checking if the new user domain name is the same as Local Host ..
    11/30 11:17:04 [5412] <SetClientAuth>HostName=abm007
    11/30 11:17:04 [5412] <SetClientAuth>New User DomainName=abm007
    11/30 11:17:04 [5412] <SetClientAuth>User Domain name is same as Host name .. Setting 'Login Domain' to =LocalComputer
    11/30 11:17:04 [5412] <SetClientAuth>Logged in user info set to: LocalComputer/Administrator
    11/30 11:17:04 [5412] <SetClientAuth>Marking User Change Notify to redo registration..
    11/30 11:17:09 [5304] <CalcAgentHashKey>:CH=5241C84EC0A8016F01FF177CD05BB7D31abm007WORKGROUPE882BA3B41F6CD2CD565205C626952B7
    11/30 11:17:09 [5304] <CalcAgentHashKey>:CHKey=9406EA23E8EF64FC5013F86A85CA47EF
    11/30 11:17:09 [5304] <CalcAgentHashKey>:C=5241C84EC0A8016F01FF177CD05BB7D31abm007WORKGROUP
    11/30 11:17:09 [5304] <CalcAgentHashKey>:CKey=6B349AED885426F55733DF27CDA8D247
    11/30 11:17:09 [5304] <CalcAgentHashKey>:UCH=5241C84EC0A8016F01FF177CD05BB7D30AdministratorLocalComputerabm007WORKGROUPE882BA3B41F6CD2CD565205C626952B7
    11/30 11:17:09 [5304] <CalcAgentHashKey>:UCHKey=780CE4B7D7303031BB1C41C6BACFB123
    11/30 11:17:09 [5304] <CalcAgentHashKey>:UC=5241C84EC0A8016F01FF177CD05BB7D30AdministratorLocalComputerabm007WORKGROUP
    11/30 11:17:09 [5304] <CalcAgentHashKey>:UCKey=62F362C2C57D94FD4548800A65B49C81
    11/30 11:17:09 [5304] <DoHeartbeat>HardwareID=E882BA3B41F6CD2CD565205C626952B7
    11/30 11:17:09 [5304] <DoHeartbeat>CHKey=9406EA23E8EF64FC5013F86A85CA47EF
    11/30 11:17:09 [5304] <DoHeartbeat>CKey=6B349AED885426F55733DF27CDA8D247
    11/30 11:17:09 [5304] <DoHeartbeat>UCHKey=780CE4B7D7303031BB1C41C6BACFB123
    11/30 11:17:09 [5304] <DoHeartbeat>UCKey=62F362C2C57D94FD4548800A65B49C81
    11/30 11:17:09 [5304] <DoHeartbeat> Set heartbeat event
    11/30 11:17:09 [5304] Use new configuration
    11/30 11:17:09 [5304] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 11:17:09 ======
    11/30 11:17:09 [5304] HEARTBEAT: Check Point 1
    11/30 11:17:09 [5304] HEARTBEAT: Check Point 2
    11/30 11:17:09 [5304] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    11/30 11:17:09 [5304] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    11/30 11:17:09 [5304] HEARTBEAT: Check Point 3
    11/30 11:17:09 [5304] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
    11/30 11:17:09 [5304] HEARTBEAT: Check Point 4
    11/30 11:17:09 [5304] <RegHeartbeatProc>===Registration STAGE===
    11/30 11:17:09 [5304] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator
    11/30 11:17:09 [5304] <GeneratePreferredGroupAndModeInRegistration:>Loading current group:My Company\info
    11/30 11:17:09 [5304] <GeneratePreferredGroupAndModeInRegistration:>Loading current mode:1
    11/30 11:17:09 [5304] <GeneratePreferredGroupAndModeInRegistration:>Loading preferred group:My Company\info
    11/30 11:17:09 [5304] <GeneratePreferredGroupAndModeInRegistration:>Loading preferred mode:1
    11/30 11:17:09 [5304] <GeneratePreferredGroupAndModeInRegistration:>It will remember nothing, PreferredGroup is My Company\info, PreferredMode is 1
    11/30 11:17:09 [5304] <MakeRegisterData:>XML data: <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="5241C84EC0A8016F01FF177CD05BB7D3" AgentType="105" UserDomain="LocalComputer" LoginUser="Administrator" ComputerDomain="WORKGROUP" ComputerName="abm007" PreferredGroup="My%20Company%5cinfo" PreferredMode="1" HardwareKey="E882BA3B41F6CD2CD565205C626952B7" SiteDomainName=""/>

    <SSAHostInfo><NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="WORKGROUP" HostName="abm007" HostDesc="" />

    <SSAProduct Version="11.0.6005.562" />

    <SSAOS Version="5.2.3790" Desc="Windows%20Server%202003%20family%20Enterprise%20Edition" Type="50659874" ServicePack="Service%20Pack%202"/>

    <Processor ProcessorType="x86%20Family%2015%20Model%202%20Stepping%209" ProcessorClock="2793" ProcessorNum="2"/>

    <Memory Size="1608466432"/>

    <BIOS Version="DELL%20%20%20-%207"/>

    <TpmDevice Id="0"/>

    <SSAProfile Version="5.0.0" SerialNumber="1F45-11%2f30%2f2010%2010%3a32%3a04%20015"/>

    <SSAIDS Version="" SerialNumber=""/>

    <SSAUTC Bias="-300" />

    <DNSs><DNS Address="192.168.1.1"/></DNSs>

    <SSANICs><SSANIC Ip="192.168.1.111" Mac="00-0d-56-1f-50-44" Gateway="192.168.1.1" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.102.1" Mac="00-50-56-c0-00-01" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.243.1" Mac="00-50-56-c0-00-08" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/></SSANICs>

    </SSAHostInfo>

    </SSARegData>
    11/30 11:17:09 [5304] <SyLink>[MakeRegisterData] registration Hardware Key=E882BA3B41F6CD2CD565205C626952B7
    11/30 11:17:09 [5304] ************Reg CSN=12
    11/30 11:17:09 [5304] <mfn_GenPostData (for Registration):>Request is: s_origin_length: 1423

    s_session_id: E882BA3B41F6CD2CD565205C626952B7

    Sygate-SSN: 12

    <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="5241C84EC0A8016F01FF177CD05BB7D3" AgentType="105" UserDomain="LocalComputer" LoginUser="Administrator" ComputerDomain="WORKGROUP" ComputerName="abm007" PreferredGroup="My%20Company%5cinfo" PreferredMode="1" HardwareKey="E882BA3B41F6CD2CD565205C626952B7" SiteDomainName=""/>

    <SSAHostInfo><NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="WORKGROUP" HostName="abm007" HostDesc="" />

    <SSAProduct Version="11.0.6005.562" />

    <SSAOS Version="5.2.3790" Desc="Windows%20Server%202003%20family%20Enterprise%20Edition" Type="50659874" ServicePack="Service%20Pack%202"/>

    <Processor ProcessorType="x86%20Family%2015%20Model%202%20Stepping%209" ProcessorClock="2793" ProcessorNum="2"/>

    <Memory Size="1608466432"/>

    <BIOS Version="DELL%20%20%20-%207"/>

    <TpmDevice Id="0"/>

    <SSAProfile Version="5.0.0" SerialNumber="1F45-11%2f30%2f2010%2010%3a32%3a04%20015"/>

    <SSAIDS Version="" SerialNumber=""/>

    <SSAUTC Bias="-300" />

    <DNSs><DNS Address="192.168.1.1"/></DNSs>

    <SSANICs><SSANIC Ip="192.168.1.111" Mac="00-0d-56-1f-50-44" Gateway="192.168.1.1" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.102.1" Mac="00-50-56-c0-00-01" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.243.1" Mac="00-50-56-c0-00-08" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/></SSANICs>

    </SSAHostInfo>

    </SSARegData>
    11/30 11:17:09 [5304] <SendRegistrationRequest:>http://192.168.1.111:8014 [encrypted data]
    11/30 11:17:09 [5304] 11:17:9=>Send HTTP REQUEST
    11/30 11:17:10 [5304] 11:17:10=>HTTP REQUEST sent
    11/30 11:17:10 [5304] 11:17:10=>QUERY return code
    11/30 11:17:10 [5304] 11:17:10=>QUERY return code completed
    11/30 11:17:10 [5304] <SendRegistrationRequest:>SMS return=200
    11/30 11:17:10 [5304] <ParseHTTPStatusCode:>200=>200 OK
    11/30 11:17:10 [5304] <SendRegistrationRequest:>Content Lenght => 350
    11/30 11:17:10 [5304] HTTP returns status code=200
    11/30 11:17:10 [5304] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
    11/30 11:17:10 [5304] <SendRegistrationRequest:>COMPLETED, returned 0
    11/30 11:17:10 [5304] <IsInClientIPorOnLink> NextHop is equal to192.168.1.111,return TRUE
    11/30 11:17:10 [5304] <mfn_GetOutIP> Out IP is:192.168.1.111
    11/30 11:17:10 [5304] HEARTBEAT: Check Point 5.1
    11/30 11:17:10 [5304] <ScheduleNextUpdate>Manually assigned heartbeat=3 seconds
    11/30 11:17:10 [5304] <PostEvent>going to post event=EVENT_SERVER_ONLINE
    11/30 11:17:10 [5304] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
    11/30 11:17:10 [5304] HEARTBEAT: Check Point 8
    11/30 11:17:10 [5304] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    11/30 11:17:10 [5304] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    11/30 11:17:10 [5304] <RegHeartbeatProc>====== Registration Procedure stops at 11:17:10 ======
    11/30 11:17:10 [5304] HEARTBEAT: Check Point 10
    11/30 11:17:10 [5304] HEARTBEAT: Check Point Complete
    11/30 11:17:10 [5304] <RegHeartbeatProc>Done, Heartbeat=3seconds
    11/30 11:17:10 [5304] <CheckHeartbeatTimer>====== Heartbeat loop stops at 11:17:10 ======
    11/30 11:17:13 [5304] <CheckHeartbeatTimer>====== Heartbeat loop starts at 11:17:13 ======
    11/30 11:17:14 [5304] <GetOnlineNicInfo>:Netport Count=3
    11/30 11:17:14 [5304] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.1.111" Mac="00-0d-56-1f-50-44" Gateway="192.168.1.1" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.102.1" Mac="00-50-56-c0-00-01" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.243.1" Mac="00-50-56-c0-00-08" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/></SSANICs>
    11/30 11:17:14 [5304] <CalcAgentHashKey>:CH=5241C84EC0A8016F01FF177CD05BB7D31abm007WORKGROUPE882BA3B41F6CD2CD565205C626952B7
    11/30 11:17:14 [5304] <CalcAgentHashKey>:CHKey=9406EA23E8EF64FC5013F86A85CA47EF
    11/30 11:17:14 [5304] <CalcAgentHashKey>:C=5241C84EC0A8016F01FF177CD05BB7D31abm007WORKGROUP
    11/30 11:17:14 [5304] <CalcAgentHashKey>:CKey=6B349AED885426F55733DF27CDA8D247
    11/30 11:17:14 [5304] <CalcAgentHashKey>:UCH=5241C84EC0A8016F01FF177CD05BB7D30AdministratorLocalComputerabm007WORKGROUPE882BA3B41F6CD2CD565205C626952B7
    11/30 11:17:14 [5304] <CalcAgentHashKey>:UCHKey=780CE4B7D7303031BB1C41C6BACFB123
    11/30 11:17:14 [5304] <CalcAgentHashKey>:UC=5241C84EC0A8016F01FF177CD05BB7D30AdministratorLocalComputerabm007WORKGROUP
    11/30 11:17:14 [5304] <CalcAgentHashKey>:UCKey=62F362C2C57D94FD4548800A65B49C81
    11/30 11:17:14 [5304] <DoHeartbeat>HardwareID=E882BA3B41F6CD2CD565205C626952B7
    11/30 11:17:14 [5304] <DoHeartbeat>CHKey=9406EA23E8EF64FC5013F86A85CA47EF
    11/30 11:17:14 [5304] <DoHeartbeat>CKey=6B349AED885426F55733DF27CDA8D247
    11/30 11:17:14 [5304] <DoHeartbeat>UCHKey=780CE4B7D7303031BB1C41C6BACFB123
    11/30 11:17:14 [5304] <DoHeartbeat>UCKey=62F362C2C57D94FD4548800A65B49C81
    11/30 11:17:14 [5304] <DoHeartbeat> Set heartbeat event
    11/30 11:17:14 [5304] Use new configuration
    11/30 11:17:14 [5304] <CSyLink::IndexHeartbeatProc()>
    11/30 11:17:14 [5304] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 01BC5390
    11/30 11:17:14 [5304] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 11:17:14 ======
    11/30 11:17:14 [5304] HEARTBEAT: Check Point 1
    11/30 11:17:14 [5304] Get First Server!
    11/30 11:17:14 [5304] HEARTBEAT: Check Point 2
    11/30 11:17:14 [5304] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    11/30 11:17:14 [5304] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    11/30 11:17:14 [5304] HEARTBEAT: Check Point 3
    11/30 11:17:14 [5304] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
    11/30 11:17:14 [5304] HEARTBEAT: Check Point 4
    11/30 11:17:14 [5304] <IndexHeartbeatProc>===Get Index STAGE===
    11/30 11:17:14 [5304] ************CSN=155
    11/30 11:17:14 [5304] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=6777D2DAC0A8016F00EA3B86887823CB&chk=9406EA23E8EF64FC5013F86A85CA47EF&ck=6B349AED885426F55733DF27CDA8D247&uchk=780CE4B7D7303031BB1C41C6BACFB123&uck=62F362C2C57D94FD4548800A65B49C81&hid=E882BA3B41F6CD2CD565205C626952B7&groupid=5241C84EC0A8016F01FF177CD05BB7D3&mode=0&hbt=300&as=155&cn=[hex]61626D303037&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    11/30 11:17:14 [5304] <GetIndexFileRequest:>http://192.168.1.111:8014/secars/secars.dll?h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
    11/30 11:17:14 [5304] 11:17:14=>Send HTTP REQUEST
    11/30 11:17:14 [5304] 11:17:14=>HTTP REQUEST sent
    11/30 11:17:14 [5304] <GetIndexFileRequest:>SMS return=200
    11/30 11:17:14 [5304] <ParseHTTPStatusCode:>200=>200 OK
    11/30 11:17:14 [5304] <FindHeader>Sem-HashKey:=>9406EA23E8EF64FC5013F86A85CA47EF
    11/30 11:17:14 [5304] <GetIndexFileRequest:>Loading the current mode:1
    11/30 11:17:14 [5304] <FindHeader>Sem-LANSensor:=>0
    11/30 11:17:14 [5304] <FindHeader>Sem-Signatue:=>0101493A268F817F165B6EAED6AA8327662D59BB9A6BF58A0D224462FF71A8BDF5889DE28377E4B5D9DA40F81B81204DD40AA814522FE3A1FCF014D60FD09D297A323FC89EE8E4F86E616BF66C2E1CFF54606EB56BBCF00226E884B81989C5F496A65D205E6C0D98ABE00A0035B8B6C2766556C4F0B638C7D3091FDDD3751E1E
    11/30 11:17:14 [5304] <mfn_DoGetIndexFile200>Content Lenght => 1363
    11/30 11:17:14 [5304] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
    11/30 11:17:14 [5304] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="B4452749C0A8016F00DD2F5988D0BF81" ServerID="A8A55E19C0A8016F019BC06FE1A83576" GroupID="1F4543FFC0A8016F008B3E08A1E11D54" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "30/11/2010 10:32:26">    <Profile Checksum="5AA16C764FFBA2697A2526BE867C6340" SerialNumber="1F45-11/30/2010 10:32:04 015" LastModifiedTime="30/11/2010  10:32:26"/>    <ConfigFile Checksum="21065F0067AB8B2B85B99FB662BDA462" LastModifiedTime="30/11/2010  09:46:20"/>    <IDSFile Checksum="703A0AE1B8EC84B36CDBAECB7E800283" LastModifiedTime="30/11/2010  09:46:24"/>    <SylinkFile Checksum="2D2DF45B5E7F14B9A9AF31FAFF31D544" LastModifiedTime="30/11/2010  10:32:26"/>    <LSProfile Checksum="A9A15C56C138C26425B2553EB135091A" SerialNumber ="1F45-11/30/2010 10:32:04 015" LastModifiedTime ="30/11/2010  10:32:26"/>
        <LiveUpdate>
            <File Checksum="C76B781E7884AD7F3A9D0A25327472BC" DeltaFlag="1" FullSize="100500648" LastModifiedTime="1291093255515" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="101129021"/>
             <File Checksum="194E352D8BC423CA44A255E2B411706F" DeltaFlag="1" FullSize="102148449" LastModifiedTime="1291092765937" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="101129021"/>
             <File Checksum="D682131EEC15E3C40FFED6D5E5623DA9" DeltaFlag="1" FullSize="961514" LastModifiedTime="1290747561187" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="101125001"/>
             <File Checksum="F5E6BD550338615DB7E90E4D59CFE8CA" DeltaFlag="1" FullSize="941935" LastModifiedTime="1290746997453" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="101125001"/>
             <File Checksum="87657F161AD95F7E50FB4FFC8EC386AE" DeltaFlag="1" FullSize="669829" LastModifiedTime="1287659981093" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
             <File Checksum="93CEC2474CCA6800694C3DE8DC3BBE75" DeltaFlag="1" FullSize="650307" LastModifiedTime="1287659998359" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
             <File Checksum="359E39382CD3AC83E35C52A4976B2F19" DeltaFlag="1" FullSize="88188" LastModifiedTime="1287660430437" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
             <File Checksum="D1B1FA82E0399B1B9395A936490689A4" DeltaFlag="1" FullSize="6487" LastModifiedTime="1287660435500" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="91111048"/>
             <File Checksum="E5F61C17CF77CAB6D0A4C2178CD5C699" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1287660443421" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
             <File Checksum="102BA5AF804FC00788D15191D8CA5E38" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1287660464812" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
             <File Checksum="BADEBCC22F1AF7E057CE72FA54C9E5F0" DeltaFlag="1" FullSize="76784" LastModifiedTime="1291093355421" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="101129009"/>
             <File Checksum="A86683CA6B3D430CB522916487B55D1C" DeltaFlag="1" FullSize="3732988" LastModifiedTime="1291093365203" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="101129009"/>
             <File Checksum="2E8331A70F613FA5077A305342EAB4FB" DeltaFlag="1" FullSize="3733015" LastModifiedTime="1291093383750" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="101129009"/>
             <File Checksum="895159B4BB1B5DE3F92A4527D5DA49FF" DeltaFlag="1" FullSize="76766" LastModifiedTime="1291093397906" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="101129009"/>
        </LiveUpdate>
    </GroupIndex>
    11/30 11:17:14 [5304] <mfn_DoGetIndexFile200>Parser Index File!
    11/30 11:17:14 [5304] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
    11/30 11:17:14 [5304] <GetIndexFileRequest:>COMPLETED
    11/30 11:17:14 [5304] <IndexHeartbeatProc>GetIndexFile handling status: 0
    11/30 11:17:14 [5304] <IndexHeartbeatProc>Switch Server flag=0
    11/30 11:17:14 [5304] HEARTBEAT: Check Point 5.1
    11/30 11:17:14 [5304] <IsInClientIPorOnLink> NextHop is equal to192.168.1.111,return TRUE
    11/30 11:17:14 [5304] <mfn_GetOutIP> Out IP is:192.168.1.111
    11/30 11:17:14 [5304] <IndexHeartbeatProc> Saved IP Address: 192.168.1.111
    11/30 11:17:14 [5304] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    11/30 11:17:15 [5304] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    11/30 11:17:15 [5304] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    11/30 11:17:15 [5304] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    11/30 11:17:15 [5304] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Seq:101129021
    11/30 11:17:15 [5304] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    11/30 11:17:15 [5304] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    11/30 11:17:15 [5304] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Seq:101125001
    11/30 11:17:15 [5304] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    11/30 11:17:15 [5304] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    11/30 11:17:15 [5304] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    11/30 11:17:15 [5304] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    11/30 11:17:15 [5304] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    11/30 11:17:15 [5304] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    11/30 11:17:15 [5304] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    11/30 11:17:15 [5304] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    11/30 11:17:15 [5304] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    11/30 11:17:15 [5304] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    11/30 11:17:15 [5304] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    11/30 11:17:15 [5304] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    11/30 11:17:15 [5304] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001
    11/30 11:17:15 [5304] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    11/30 11:17:15 [5304] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    11/30 11:17:15 [5304] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    11/30 11:17:15 [5304] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    11/30 11:17:15 [5304] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:101129009
    11/30 11:17:15 [5304] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    11/30 11:17:15 [5304] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    11/30 11:17:15 [5304] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    11/30 11:17:15 [5304] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    11/30 11:17:15 [5304] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:101129009
    11/30 11:17:15 [5304] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    11/30 11:17:16 [5304] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    11/30 11:17:16 [5304] <PostEvent>going to post event=EVENT_PACKAGE_REQUIRE_STATUS
    11/30 11:17:16 [5304] <PostEvent>done post event=EVENT_PACKAGE_REQUIRE_STATUS, return=17
    11/30 11:17:16 [5304] <mfn_GetClientPackage> The package at Index 0 is NOT needed by the client .. Going to the next package..
    11/30 11:17:16 [5304] <PostEvent>going to post event=EVENT_SERVER_ONLINE
    11/30 11:17:16 [5304] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
    11/30 11:17:16 [5304] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=300 seconds
    11/30 11:17:16 [5304] HEARTBEAT: Check Point 6
    11/30 11:17:16 [5304] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
    11/30 11:17:16 [5304] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: GUP
    11/30 11:17:16 [5304] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
    11/30 11:17:16 [5304] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
    11/30 11:17:16 [5304] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
    11/30 11:17:16 [5304] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
    11/30 11:17:16 [5304] ReasonDescForFailure*** = Host Integrity check is disabled.
    11/30 11:17:16 [5304] ReasonDescForFailure*** = Host Integrity check is disabled.
    11/30 11:17:16 [5304] *** = <SSAInfo NameSpace="rpc" AgentID="6777D2DAC0A8016F00EA3B86887823CB" ComputerID="D8A14664C0A8016F00EA3B86EE8277A8" HardwareKey="E882BA3B41F6CD2CD565205C626952B7" GroupID="1F4543FFC0A8016F008B3E08A1E11D54">

    <AgentHIInfo Status="3" ReasonCode="105" ReasonDescForFailure="Host Integrity check is disabled."/>

    <SSAHostInfo>

    <NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="WORKGROUP" HostName="abm007" HostDesc=""/>

    <SSAProduct Version="11.0.6005.562"/>

    <SSAOS Version="5.2.3790" Desc="Windows Server 2003 family Enterprise Edition" Type="50659874" ServicePack="Service Pack 2" Language="9"/>

    <Processor ProcessorType="x86 Family 15 Model 2 Stepping 9" ProcessorClock="2793" ProcessorNum="2"/>

    <Memory Size="1608466432"/>

    <Disk Letter="C:\" Size="31453437952"/>

    <BIOS Version="DELL   - 7"/>

    <TpmDevice Id="0"/>

    <SSAProfile Version="5.0.0" SerialNumber="1F45-11/30/2010 10:32:04 015"/>

    <SSAIDS Version="" SerialNumber=""/>

    <Deuce Signature="101125001"/>

    <SSAUTC Bias="-300"/>

    <DNSs><DNS Address="192.168.1.1"/></DNSs>

    <SSANICs><SSANIC Ip="192.168.1.111" Mac="00-0d-56-1f-50-44" Gateway="192.168.1.1" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.102.1" Mac="00-50-56-c0-00-01" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.243.1" Mac="00-50-56-c0-00-08" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>

    </SSAHostInfo>

    <RebootRequired Status="0"></RebootRequired>

    <InstalledFeatures><Feature Id ="256"/></InstalledFeatures>

    </SSAInfo>


    11/30 11:17:16 [5304] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 1291097836
    11/30 11:17:16 [5304] <mfn_PostAgentInfo>Free memory difference: 174747648, Threshold: 0
    11/30 11:17:16 [5304] <mfn_PostAgentInfo>Free disk space difference: 6259924992, Threshold: 0
    11/30 11:17:16 [5304] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
    11/30 11:17:16 [5304] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
    11/30 11:17:16 [5304] <mfn_PostAgentInfo><?xml version='1.0' encoding='UTF-8' ?>

    <SESAgentOpState AgentID="6777D2DAC0A8016F00EA3B86887823CB" Timestamp="1291097836078"><TechID Name="AVMan"><Data><![CDATA[<avstate version="1.0"><RTVScanRunning>1</RTVScanRunning><PatternFileRevision>21</PatternFileRevision><UsingPattern>3340821</UsingPattern><PatternFileSequence>0</PatternFileSequence><PatternFileDate>280A1D000000</PatternFileDate><TimeOfLastVirus>000000000000</TimeOfLastVirus><TimeOfLastScan>280A1D0E122C</TimeOfLastScan><WorstInfectionType>9999</WorstInfectionType><OnOff>1</OnOff><SymProtectOnOff>1</SymProtectOnOff><SymSentryInstalled>0</SymSentryInstalled><SavProductVersion>27663362</SavProductVersion><Licensed>0</Licensed><LicenseStatus>0</LicenseStatus><LicenseExpirationTime>000000000000</LicenseExpirationTime><DecAbiVer>1.2.5</DecAbiVer><EraserEngineVer>7208961:131081</EraserEngineVer><Moniker Id="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Version="1.5.0" Seq="80929017" Owner="SyKnAppS"  /><Moniker Id="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Version="MicroDefsB.CurDefs" Seq="101129009" Owner="SyKnAppS"  /><Moniker Id="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Version="MicroDefsB.CurDefs" Seq="101129009" Owner="SyKnAppS"  /><Moniker Id="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Version="6.1.0" Seq="80820001" Owner="COH"  /><Moniker Id="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Version="6.1.0" Seq="80820001" Owner="COH"  /></avstate>]]></Data></TechID><TechID Name="GUP"><Data><![CDATA[<?xml version='1.0' encoding='UTF-8' ?>
    <GupStatus IsGup="0" NameSpace="rpc" ComputerID="D8A14664C0A8016F00EA3B86EE8277A8"/>]]></Data></TechID><TechID Name="LUMan"><Data><![CDATA[<lustate><lastUpdateTime>1291092512515</lastUpdateTime></lustate>]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="6777D2DAC0A8016F00EA3B86887823CB" ComputerID="D8A14664C0A8016F00EA3B86EE8277A8" HardwareKey="E882BA3B41F6CD2CD565205C626952B7" GroupID="1F4543FFC0A8016F008B3E08A1E11D54">

    <AgentHIInfo Status="3" ReasonCode="105" ReasonDescForFailure="Host Integrity check is disabled."/>

    <SSAHostInfo>

    <NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="WORKGROUP" HostName="abm007" HostDesc=""/>

    <SSAProduct Version="11.0.6005.562"/>

    <SSAOS Version="5.2.3790" Desc="Windows Server 2003 family Enterprise Edition" Type="50659874" ServicePack="Service Pack 2" Language="9"/>

    <Processor ProcessorType="x86 Family 15 Model 2 Stepping 9" ProcessorClock="2793" ProcessorNum="2"/>

    <Memory Size="1608466432"/>

    <Disk Letter="C:\" Size="31453437952"/>

    <BIOS Version="DELL   - 7"/>

    <TpmDevice Id="0"/>

    <SSAProfile Version="5.0.0" SerialNumber="1F45-11/30/2010 10:32:04 015"/>

    <SSAIDS Version="" SerialNumber=""/>

    <Deuce Signature="101125001"/>

    <SSAUTC Bias="-300"/>

    <DNSs><DNS Address="192.168.1.1"/></DNSs>

    <SSANICs><SSANIC Ip="192.168.1.111" Mac="00-0d-56-1f-50-44" Gateway="192.168.1.1" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.102.1" Mac="00-50-56-c0-00-01" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.243.1" Mac="00-50-56-c0-00-08" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>

    </SSAHostInfo>

    <RebootRequired Status="0"></RebootRequired>

    <InstalledFeatures><Feature Id ="256"/></InstalledFeatures>

    </SSAInfo>

    ]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="6777D2DAC0A8016F00EA3B86887823CB" ComputerID="D8A14664C0A8016F00EA3B86EE8277A8" HardwareKey="E882BA3B41F6CD2CD565205C626952B7" GroupID="1F4543FFC0A8016F008B3E08A1E11D54">

    <SSAHostInfo>

    <Memory Free="174747648"/>

    <Disk Letter="C:\" Free="6259924992"/>

    </SSAHostInfo>

    </SSAInfo>

    ]]></Data></TechID></SESAgentOpState>
    11/30 11:17:16 [5304] ************CSN=156
    11/30 11:17:16 [5304] <mfn_MakePostUrl:>Request is: action=192&hostid=6777D2DAC0A8016F00EA3B86887823CB&chk=9406EA23E8EF64FC5013F86A85CA47EF&ck=6B349AED885426F55733DF27CDA8D247&uchk=780CE4B7D7303031BB1C41C6BACFB123&uck=62F362C2C57D94FD4548800A65B49C81&as=156&cn=[hex]61626D303037&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    11/30 11:17:16 [5304] <mfn_PostAgentInfo>http://192.168.1.111:8014/secars/secars.dll?h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
    11/30 11:17:16 [5304] <mfn_PostAgentInfo>POST the total size=1540
    11/30 11:17:16 [5304] <mfn_PostAgentInfo>Done with return code = 200
    11/30 11:17:16 [5304] <IndexHeartbeatProc>===UPLOAD STAGE===
    11/30 11:17:16 [5304] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
    11/30 11:17:16 [5304] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
    11/30 11:17:16 [5304] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
    11/30 11:17:16 [5304] <PrepareEventLog>initialized technology extension processing ok
    11/30 11:17:16 [5304] <CalcEventLogIndex>Need to send Event Log Type(0) from id 49 to 58
    11/30 11:17:16 [5304] <PrepareEventLog>Allow total logs to send=10
    11/30 11:17:16 [5304] <PrepareEventLog>nSecurityRecordsTotal=0
    11/30 11:17:16 [5304] <PrepareEventLog>nSecurityRecordsToSend=0
    11/30 11:17:16 [5304] <PrepareEventLog>nSystemRecordsTotal=10
    11/30 11:17:16 [5304] <PrepareEventLog>nSystemRecordsToSend=100
    11/30 11:17:16 [5304] <PrepareEventLog>nTrafficRecordsTotal=0
    11/30 11:17:16 [5304] <PrepareEventLog>nTrafficRecordsToSend=0
    11/30 11:17:16 [5304] <PrepareEventLog>nRawRecordsTotal=0
    11/30 11:17:16 [5304] <PrepareEventLog>nRawRecordsToSend=0
    11/30 11:17:16 [5304] <PrepareEventLog>nProcessRecordsTotal=0
    11/30 11:17:16 [5304] <PrepareEventLog>nProcessRecordsToSend=0
    11/30 11:17:16 [5304] <PrepareEventLog>nLANSensorRecordsTotal=0
    11/30 11:17:16 [5304] <PrepareEventLog>nLANSensorRecordsToSend=0
    11/30 11:17:16 [5304] <PrepareEventLog>nTechExtensionRecordsTotal=0
    11/30 11:17:16 [5304] <PrepareEventLog>nTechExtensionRecordsToSend=0
    11/30 11:17:16 [5304] <MakeSystemLog>The size of SYSTEM event logs is 4366.
    11/30 11:17:16 [5304] <SyLink>The size of SYSTEM event logs is 4366.
    11/30 11:17:16 [5304] <MakeSecurityLog>Attached total 0 bytes SECURITY event logs.
    11/30 11:17:16 [5304] <MakeTrafficLog>Attached total 0 bytes TRAFFIC event logs.
    11/30 11:17:16 [5304] <MakeRawTrafficLog>Attached total 0 bytes RAW TRAFFIC event logs.
    11/30 11:17:16 [5304] <MakeProcessLog>Attached total 0 bytes process event logs.
    11/30 11:17:16 [5304] <IndexHeartbeatProc>===COMPRESS EVENT LOG STAGE===
    11/30 11:17:16 [5304] <IndexHeartbeatProc>===SEND EVENT LOG STAGE===
    11/30 11:17:16 [5304] ************CSN=157
    11/30 11:17:16 [5304] <mfn_MakePostUrl:>Request is: action=195&hostid=6777D2DAC0A8016F00EA3B86887823CB&chk=9406EA23E8EF64FC5013F86A85CA47EF&ck=6B349AED885426F55733DF27CDA8D247&uchk=780CE4B7D7303031BB1C41C6BACFB123&uck=62F362C2C57D94FD4548800A65B49C81&groupid=5241C84EC0A8016F01FF177CD05BB7D3&as=157&cn=[hex]61626D303037&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    11/30 11:17:16 [5304] <SendEventLogToServer>http://192.168.1.111:8014/secars/secars.dll?h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
    11/30 11:17:16 [5304] <SendEventLogToServer>eventlog-->SMS, size=1000
    11/30 11:17:16 [5304] <SendEventLogToServer>uploads the eventlog to server, size=1000
    11/30 11:17:16 [5304] <SendEventLogToServer>Query return code = 200
    11/30 11:17:16 [5304] <SendEventLogToServer>EventLog-->SEM DONE!
    11/30 11:17:16 [5304] <PostEvent>going to post event=EVENT_SERVER_EVENT_LOG_SENT
    11/30 11:17:16 [5304] <PostEvent>done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0
    11/30 11:17:16 [5304] <IndexHeartbeatProc>Communication Mode=0(Push Mode)
    11/30 11:17:16 [5304] <IndexHeartbeatProc>Enter Push Session
    11/30 11:17:16 [5304] <IndexHeartbeatProc>Setting the session timeout on Profile Session (for MaintainPushConnection) to 320000
    11/30 11:17:16 [5304] <MaintainPushConnection:>Push Connecton!
    11/30 11:17:17 [5304] ************CSN=158
    11/30 11:17:17 [5304] <mfn_MakeGetPushUrl:>Request is: action=128&hostid=6777D2DAC0A8016F00EA3B86887823CB&chk=9406EA23E8EF64FC5013F86A85CA47EF&ck=6B349AED885426F55733DF27CDA8D247&uchk=780CE4B7D7303031BB1C41C6BACFB123&uck=62F362C2C57D94FD4548800A65B49C81&groupid=5241C84EC0A8016F01FF177CD05BB7D3&mode=0&as=158
    11/30 11:17:17 [5304] <MaintainPushConnection:>http://192.168.1.111:8014/secars/secars.dll?h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
    11/30 11:18:02 [5472] <CExpBackoff::CExpBackoff()>
    11/30 11:18:02 [5472] </CExpBackoff::CExpBackoff()>
    11/30 11:18:04 [5260] <CSyLink::mfn_DownloadNow()>
    11/30 11:18:04 [5260] </CSyLink::mfn_DownloadNow()>
    11/30 11:18:21 [5412] SyLinkDeleteConfig => Deleting instance: 01081228
    11/30 11:18:21 [5412] <PostEvent>going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    11/30 11:18:21 [5412] <PostEvent>done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0
    11/30 11:18:21 [5412] <Stop>Stopping SyLink module...
    11/30 11:18:21 [5412] 11:18:21=>To stop LU download thread
    11/30 11:18:21 [5412] 11:18:21=>To stop LU download thread returned
    11/30 11:18:21 [5412] 11:18:21=>To stop MAIN thread
    11/30 11:18:21 [5260] <MainThreadProc:>***** Main Thread Exit ****
    11/30 11:18:21 [5412] 11:18:21=>To stop MAIN thread returned
    11/30 11:18:21 [5412] 11:18:21=>To stop HEARTBEAT thread
    11/30 11:18:21 [5412] HEARTBEAT RUN TIME=67sec
    11/30 11:18:21 [5412] 11:18:21=>To close Heartbeat thread...
    11/30 11:18:21 [5304] AH: (InetWaiting) urgent exit event on InetCtrlBlock: 01B57988
    11/30 11:18:21 [5304] Throw Internet Exception, Error Code=2;AH: failed to send request...
    11/30 11:18:21 [5304] <MaintainPushConnection:>COMPLETED
    11/30 11:18:21 [5304] <ScheduleNextUpdate>new scheduled heartbeat=32 seconds
    11/30 11:18:21 [5304] HEARTBEAT: Check Point 8
    11/30 11:18:21 [5304] <PostEvent>stopping...ignore event ID=EVENT_SERVER_DISCONNECTED
    11/30 11:18:21 [5304] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 11:18:21 ======
    11/30 11:18:21 [5304] <IndexHeartbeatProc>Set Heartbeat Result= 2
    11/30 11:18:21 [5304] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
    11/30 11:18:21 [5304] Use new configuration
    11/30 11:18:21 [5304] HEARTBEAT: Check Point Complete
    11/30 11:18:21 [5304] <IndexHeartbeatProc>Done, Heartbeat=32seconds
    11/30 11:18:21 [5304] </CSyLink::IndexHeartbeatProc()>
    11/30 11:18:21 [5304] <CheckHeartbeatTimer>====== Heartbeat loop stops at 11:18:21 ======
    11/30 11:18:21 [5304] <IsToStop:>stopping
    11/30 11:18:21 [5304] <CheckHeartbeatTimer>Sylink is Stopping mode
    11/30 11:18:21 [5304] <IsToStop:>stopping
    11/30 11:18:21 [5304] <HeartbeatThreadProc:>Thread is stopping..
    11/30 11:18:21 [5412] 11:18:21=>To close Heartbeat thread returned
    11/30 11:18:21 [5412] <StopHbThread>Heartbeat thread stopped, Heartbeat=32
    11/30 11:18:21 [5412] 11:18:21=>To stop HEARTBEAT thread returned
    11/30 11:18:21 [5412] 11:18:21=>To stop DOWNLOAD THREAD
    11/30 11:18:21 [5412] <CDownloadManager::mfn_StopDownload()>
    11/30 11:18:21 [5412] </CDownloadManager::mfn_StopDownload()>
    11/30 11:18:21 [5412] 11:18:21=>To stop DOWNLOAD THREAD returned
    11/30 11:18:21 [5412] <Stop>Switch the new setting.
    11/30 11:18:21 [5412] Importing ConfigObject: 01BC7EC0 into: 01BC5390
    11/30 11:18:21 [5412] SyLinkDeleteConfig => Deleting instance: 01BC7EC0
    11/30 11:18:21 [5412] Write to registry UserGUID=0
    11/30 11:18:21 [5412] <Stop>Stopped!
    11/30 11:18:21 [5412] 11:18:21=>STOP command completed
    11/30 11:18:21 [5412] SyLinkDeleteInstance => Deleting instance: 01BE1F30
    11/30 11:18:21 [5412] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    11/30 11:18:21 [5412] <Stop>Not started yet!.
    11/30 11:18:21 [5412] SyLinkDeleteConfig => Deleting instance: 01BC5390
    11/30 11:18:21 [5412] <FreeProcessingDetails> Freeing: AVMan
    11/30 11:18:21 [5412] <FreeProcessingDetails> Freeing: GUP
    11/30 11:18:21 [5412] <FreeProcessingDetails> Freeing: LUMan
    11/30 11:18:21 [5412] <FreeProcessingDetails> Freeing: NacMan
    11/30 11:18:21 [5412] SyLink object is deleted !



  • 15.  RE: User information not showing

    Posted Nov 30, 2010 01:29 AM

     

    pete plz look in sylink logs,,,



  • 16.  RE: User information not showing

    Broadcom Employee
    Posted Nov 30, 2010 01:40 AM

    does this machine's information not seen on SEPM, since the client is sennding the information to SEPM, if it is not seen then the SEPM is unable to process agant information into DB.

    can you try restarting the SEPM and the DB service?

    abm007 is the client machine name.

     

    SESAgentOpState AgentID="6777D2DAC0A8016F00EA3B86887823CB" Timestamp="1291097836078"><TechID Name="AVMan"><Data><![CDATA[<avstate version="1.0"><RTVScanRunning>1</RTVScanRunning><PatternFileRevision>21</PatternFileRevision><UsingPattern>3340821</UsingPattern><PatternFileSequence>0</PatternFileSequence><PatternFileDate>280A1D000000</PatternFileDate><TimeOfLastVirus>000000000000</TimeOfLastVirus><TimeOfLastScan>280A1D0E122C</TimeOfLastScan><WorstInfectionType>9999</WorstInfectionType><OnOff>1</OnOff><SymProtectOnOff>1</SymProtectOnOff><SymSentryInstalled>0</SymSentryInstalled><SavProductVersion>27663362</SavProductVersion><Licensed>0</Licensed><LicenseStatus>0</LicenseStatus><LicenseExpirationTime>000000000000</LicenseExpirationTime><DecAbiVer>1.2.5</DecAbiVer><EraserEngineVer>7208961:131081</EraserEngineVer><Moniker Id="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Version="1.5.0" Seq="80929017" Owner="SyKnAppS"  /><Moniker Id="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Version="MicroDefsB.CurDefs" Seq="101129009" Owner="SyKnAppS"  /><Moniker Id="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Version="MicroDefsB.CurDefs" Seq="101129009" Owner="SyKnAppS"  /><Moniker Id="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Version="6.1.0" Seq="80820001" Owner="COH"  /><Moniker Id="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Version="6.1.0" Seq="80820001" Owner="COH"  /></avstate>]]></Data></TechID><TechID Name="GUP"><Data><![CDATA[<?xml version='1.0' encoding='UTF-8' ?>
    <GupStatus IsGup="0" NameSpace="rpc" ComputerID="D8A14664C0A8016F00EA3B86EE8277A8"/>]]></Data></TechID><TechID Name="LUMan"><Data><![CDATA[<lustate><lastUpdateTime>1291092512515</lastUpdateTime></lustate>]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="6777D2DAC0A8016F00EA3B86887823CB" ComputerID="D8A14664C0A8016F00EA3B86EE8277A8" HardwareKey="E882BA3B41F6CD2CD565205C626952B7" GroupID="1F4543FFC0A8016F008B3E08A1E11D54">

    <AgentHIInfo Status="3" ReasonCode="105" ReasonDescForFailure="Host Integrity check is disabled."/>

    <SSAHostInfo>

    <NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="WORKGROUP" HostName="abm007" HostDesc=""/>

    <SSAProduct Version="11.0.6005.562"/>

    <SSAOS Version="5.2.3790" Desc="Windows Server 2003 family Enterprise Edition" Type="50659874" ServicePack="Service Pack 2" Language="9"/>

    <Processor ProcessorType="x86 Family 15 Model 2 Stepping 9" ProcessorClock="2793" ProcessorNum="2"/>

    <Memory Size="1608466432"/>

    <Disk Letter="C:\" Size="31453437952"/>

    <BIOS Version="DELL   - 7"/>

    <TpmDevice Id="0"/>

    <SSAProfile Version="5.0.0" SerialNumber="1F45-11/30/2010 10:32:04 015"/>

    <SSAIDS Version="" SerialNumber=""/>

    <Deuce Signature="101125001"/>

    <SSAUTC Bias="-300"/>

    <DNSs><DNS Address="192.168.1.1"/></DNSs>

    <SSANICs><SSANIC Ip="192.168.1.111" Mac="00-0d-56-1f-50-44" Gateway="192.168.1.1" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.102.1" Mac="00-50-56-c0-00-01" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/><SSANIC Ip="192.168.243.1" Mac="00-50-56-c0-00-08" Gateway="0.0.0.0" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="1" Installed="1"/> 



  • 17.  RE: User information not showing

    Posted Nov 30, 2010 01:41 AM

    hi guys,

     

    my this post need quick response so kindly some one guide me.



  • 18.  RE: User information not showing

    Posted Nov 30, 2010 01:59 AM

    Yes, Client machine name is abm007.

     

    i am facing this in two different environment...

     

    I restart services of DB and SEPM.. same result ,,

     

    information is not visible at sepm



  • 19.  RE: User information not showing

    Posted Nov 30, 2010 02:51 AM

    One thing more need to be confirm,

     

    Either this option work in Domain or Workgroup.

     

    I searched on web , no helpful information found ,,

     

    Any one ?



  • 20.  RE: User information not showing

    Broadcom Employee
    Posted Nov 30, 2010 02:56 AM

    hi,

    i would suggest to open a ticket with Symantec. This works both on workgroup and domain.

     

    I believe this issue is at SEPM end. are there number of .dat files under agentinfo folder

    Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\agentinfo ?



  • 21.  RE: User information not showing

    Posted Nov 30, 2010 03:25 AM

    Dear Pete,

     

    There is no dat file in this location Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\agentinfo ?

     

    what can be reason your idea



  • 22.  RE: User information not showing

    Posted Nov 30, 2010 05:47 AM

    it is RU6 release problem,,,,

     

    in RU5 informaiton is visible



  • 23.  RE: User information not showing
    Best Answer

    Posted Nov 30, 2010 08:12 AM

    Problem has been resolve by installation RU5