Video Screencast Help

What is the meaning of an Offline Status

Created: 01 Jan 2013 • Updated: 07 Jan 2013 | 9 comments
This issue has been solved. See solution.

Hi All,

Most of my client computers are reporting an Offline Status, though they are updated and not infected. I understand that this could mean that, The SEP client installed is corrupt and I need to replace a sylink file.

Does it also mean that , The client computers are switched off ,meaning that the computers are turned off.

I'm managing SEP globally and most of the time I'm viewing clients from the console.

From the console they are in computer mode and there's no green dot. From the Monitors logs the status is Offline.

Thank you

Comments 9 CommentsJump to latest comment

Ashish-Sharma's picture


There is many Reason.

1) Client are not connected in Network.

2) Sep client are Corrupted.

3) Duplicate SEP client.

4) Not communicate SEPM server.

You can check are really sep client are offline or other reason

Troubleshooting Client Communication with SEPM
Article:TECH95789  |  Created: 2009-01-26  |  Updated: 2012-01-03  |  Article URL  
Symantec Endpoint Protection: Troubleshooting Client/Server Connectivity
Article:TECH105894  |  Created: 2008-01-12  |  Updated: 2012-10-04  |  Article URL 

Thanks In Advance

Ashish Sharma

pete_4u2002's picture

check this article for client srever troubleshooting
pass on the sylink log, if you need help in reviewing.

Ajit Jha's picture

If the Client status shows that its Offline, means that particular client is not reporting to the client. There may be several reasons for the same. Most probably communication issue.


Ajit Jha

Technical Consultant


SMLatCST's picture

The "Offline" status merely means that the SEPM has not heard from the client within its configured heartbeat interval.  The reasons behind it are numerous (as earlier posts have indicated) and could range from a simple network blip, to the client having been vapourised in an alien attack (maybe a little unlikely wink), and everything in between (for example: client is off, client is disconnected from the network, a firewall is blocking comms, client is trying to connect to SEPM via a proxy, client cannot resolve SEPM name, etc, etc, etc).

The "Offline" status is only really cause for concern if you think those client should be online.  In which case, it's time to get a hold of one of those clients and do some investigation (Ashish's links should help here, and "Thumbs Up").

ᗺrian's picture

It means the SEP client is not reporting to the SEPM for one reason or another. The PC could be turned off and missed the heartbeat check in or something could be wrong with the client.

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Chetan Savade's picture


Go through this article.

Description of the different shield icon statuses in the System Tray for Symantec Endpoint Protection.

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

rs_cert's picture

There are many reason for the same.

1. Systems are in unmanage condition.

2. Port is not open for the same systems Vlan.
Ans Open the port 8014 from firewall (http://management_server_address:8014/secars/secar...) Answer Come Ok then port is opened

3. System is power Off
Ans Align someone to switch on the system

4. System is in Sleep Mode.
Ans Wak On Ln Utility

5. Proxy Setting issue

rs_cert's picture

Have you read and try the attach comments?

What is the current status of your issue?