Video Screencast Help

What is the meaning of an Offline Status

Created: 01 Jan 2013 • Updated: 07 Jan 2013 | 9 comments
This issue has been solved. See solution.

Hi All,

Most of my client computers are reporting an Offline Status, though they are updated and not infected. I understand that this could mean that, The SEP client installed is corrupt and I need to replace a sylink file.

Does it also mean that , The client computers are switched off ,meaning that the computers are turned off.

I'm managing SEP globally and most of the time I'm viewing clients from the console.

From the console they are in computer mode and there's no green dot. From the Monitors logs the status is Offline.

Thank you

 

 

Comments 9 CommentsJump to latest comment

Ashish-Sharma's picture

Hi,

There is many Reason.

1) Client are not connected in Network.

2) Sep client are Corrupted.

3) Duplicate SEP client.

4) Not communicate SEPM server.

You can check are really sep client are offline or other reason

 

Troubleshooting Client Communication with SEPM

Article:TECH95789  |  Created: 2009-01-26  |  Updated: 2012-01-03  |  Article URL http://www.symantec.com/docs/TECH95789  

 

Symantec Endpoint Protection: Troubleshooting Client/Server Connectivity

Article:TECH105894  |  Created: 2008-01-12  |  Updated: 2012-10-04  |  Article URL http://www.symantec.com/docs/TECH105894 

 

Thanks In Advance

Ashish Sharma

 

 

pete_4u2002's picture

check this article for client srever troubleshooting
http://www.symantec.com/docs/TECH160964
pass on the sylink log, if you need help in reviewing.

Ajit Jha's picture

If the Client status shows that its Offline, means that particular client is not reporting to the client. There may be several reasons for the same. Most probably communication issue.

Regard's

Ajit Jha

Technical Consultant

ASC & STS

SMLatCST's picture

The "Offline" status merely means that the SEPM has not heard from the client within its configured heartbeat interval.  The reasons behind it are numerous (as earlier posts have indicated) and could range from a simple network blip, to the client having been vapourised in an alien attack (maybe a little unlikely wink), and everything in between (for example: client is off, client is disconnected from the network, a firewall is blocking comms, client is trying to connect to SEPM via a proxy, client cannot resolve SEPM name, etc, etc, etc).

The "Offline" status is only really cause for concern if you think those client should be online.  In which case, it's time to get a hold of one of those clients and do some investigation (Ashish's links should help here, and "Thumbs Up").

_Brian's picture

It means the SEP client is not reporting to the SEPM for one reason or another. The PC could be turned off and missed the heartbeat check in or something could be wrong with the client.

SOLUTION
Chetan Savade's picture

Hi,

Go through this article.

Description of the different shield icon statuses in the System Tray for Symantec Endpoint Protection.

http://www.symantec.com/docs/HOWTO55020

http://www.symantec.com/docs/HOWTO55455

Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

rs_cert's picture

There are many reason for the same.

1. Systems are in unmanage condition.
Ans https://www-secure.symantec.com/connect/downloads/...
https://www-secure.symantec.com/connect/downloads/...

2. Port is not open for the same systems Vlan.
Ans Open the port 8014 from firewall (http://management_server_address:8014/secars/secar...) Answer Come Ok then port is opened

3. System is power Off
Ans Align someone to switch on the system

4. System is in Sleep Mode.
Ans Wak On Ln Utility

5. Proxy Setting issue
Ans https://www-secure.symantec.com/connect/forums/ser...
https://www-secure.symantec.com/connect/forums/off...

rs_cert's picture

Have you read and try the attach comments?

What is the current status of your issue?