Will SEP 12.x. client reboot/restart after new defs or a scan is complete
Created: 24 Feb 2013 | 15 comments
Hi All,
Will SEP 12.x. client reboot/restart after new defs are patched to clients or a scan is complete after a defs' updates?
Also, please share any link or KB article where symantec has confirmed this.
Regards,
Arnav Sharma
Operating Systems:
Comments 15 Comments • Jump to latest comment
No,
If you have upgrade your sep client you can set reboot sep client but after scan and virus defination after system reboot it's not possible.
Do you have any problem restart system after virus defination and scan complete ?
Thanks In Advance
Ashish Sharma
SEPM Knowledgebase Documents
what about these logs::
Symantec Endpoint Protection services shutdown was successful
Symantec Endpoint Protection services startup was successful
20th Feb’13:
2B0114002903,3,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on all drives and all extensions.",1361248555,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,B467E5AFCF3246128D1C4EB7F71F367C,0,2B0114002903,
2B011400293A,65,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Suspended: Risks: 0 Scanned: 795 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 624",1361248555,,0,0:0:795:0:624,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,B467E5AFCF3246128D1C4EB7F71F367C,55,2B011400293A,
2B0114011203,66,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan resumed on all drives and all extensions.",1361248555,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,B467E5AFCF3246128D1C4EB7F71F367C,0,2B0114011203,
2B0114013208,2,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 158166 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 632",1361248555,,0,0:0:158166:0:632,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,B467E5AFCF3246128D1C4EB7F71F367C,1925,2B0114013208,
2B01140A052D,13,2,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Symantec Endpoint Protection services shutdown was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140A052D,
2B01140A0623,14,2,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Symantec Endpoint Protection services startup was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140A0623,
2B01140A0739,79,2,16,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Proactive Threat Protection has been enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01140A0739,
2B01140A073A,93,2,16,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Symantec Endpoint Protection Tamper Protection Enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01140A073A,
2B01140B110A,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130219017.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140B110A,
2B01140B110A,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334992,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,4AF550D5584445B7871585CA9A5660A5,0,2B01140B110A,
2B01140B111A,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 734 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 613",1361334992,,0,0:0:734:0:613,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,4AF550D5584445B7871585CA9A5660A5,16,2B01140B111A,
2B01140E0A27,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130219024.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01140E0A27,
2B01140E0A28,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334993,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,D9ED11B7D5C64856B7BC8BEA6444753D,0,2B01140E0A28,
2B01140E0A35,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 757 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 636",1361334993,,0,0:0:757:0:636,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,D9ED11B7D5C64856B7BC8BEA6444753D,13,2B01140E0A35,
2B0114162022,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130220003.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B0114162022,
2B0114162022,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334994,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,7215758F64D0441C831BFDD3016B9BD2,0,2B0114162022,
2B0114162033,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 737 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 634",1361334994,,0,0:0:737:0:634,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,7215758F64D0441C831BFDD3016B9BD2,17,2B0114162033,
21st Feb’13
2B0115011501,3,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on all drives and all extensions.",1361334995,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,A7A7FC9BE3DE404BAE10B719B5453BEC,0,2B0115011501,
2B0115011539,65,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Suspended: Risks: 0 Scanned: 796 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 638",1361334995,,0,0:0:796:0:638,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,A7A7FC9BE3DE404BAE10B719B5453BEC,56,2B0115011539,
2B0115012701,66,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan resumed on all drives and all extensions.",1361334995,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,A7A7FC9BE3DE404BAE10B719B5453BEC,0,2B0115012701,
2B0115020A00,65,2,0,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Suspended: Risks: 0 Scanned: 148950 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 645",1361334995,,0,0:0:148950:0:645,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,A7A7FC9BE3DE404BAE10B719B5453BEC,1859,2B0115020A00,
2B011507091B,7,3,8,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"New virus definition file loaded. Version: 130220016.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B011507091B,
2B011507091B,3,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan started on selected drives and folders and all extensions.",1361334997,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,AD48E6F86F5144088DB3039EF0F0F9AB,0,2B011507091B,
2B011507092C,2,2,11,DESKTOP_TEST,SYSTEM,,,,,,,16777216,"Scan Complete: Risks: 0 Scanned: 740 Files/Folders/Drives Omitted: 0 Trusted Files Skipped: 635",1361334997,,0,0:0:740:0:635,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,0,AD48E6F86F5144088DB3039EF0F0F9AB,17,2B011507092C,
2B01150A0E27,13,2,8,DESKTOP_TEST,User_ID,,,,,,,16777216,"Symantec Endpoint Protection services shutdown was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01150A0E27,
2B01150A0F23,14,2,8,DESKTOP_TEST,User_ID,,,,,,,16777216,"Symantec Endpoint Protection services startup was successful.",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,0,,,,,,,,,,,,,,,,,,,,,,0,2B01150A0F23,
2B01150A1038,79,2,16,DESKTOP_TEST,User_ID,,,,,,,16777216,"Proactive Threat Protection has been enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01150A1038,
2B01150A1038,93,2,16,DESKTOP_TEST,User_ID,,,,,,,16777216,"Symantec Endpoint Protection Tamper Protection Enabled",0,,0,,,,,0,,,,,,,,,,,{EBCF4ACC-7DED-4C1B-B7F5-B3B38FB2F864},,,,DOMAIN_ABC,8C:89:A5:91:D3:95,12.1.2015.2015,,,,,,,,,,,,,,,,999,,,,,,,,,,,,,,,,,,,,,,0,2B01150A1038,
Check this same Thread you have raised
https://www-secure.symantec.com/connect/forums/client-stops-and-starts-again
Thanks In Advance
Ashish Sharma
SEPM Knowledgebase Documents
Pls check attached screenshot
Check the article
http://www.symantec.com/business/support/index?page=content&id=TECH91474
Thanks Robin, but in my case client was installed long back. The issue is, the client re-starts itself @ a specific time regularly (@ around 10 AM evenryday)
Is the article valid in my case as well?
Hi,
Yes I think @ 10 AM your new virus defination are arived .
May be that's a process for stop the SEP client service and update virus defination. same i have check my SEP client it's happening (Sep service Client service are restart)
Thanks In Advance
Ashish Sharma
SEPM Knowledgebase Documents
Thanks Ashish, Has Symantec documented this anywhere? SEP client will restart after an update?
I have network access protection enabled, once the SEP stops the systems are restricted from network access. :(
Hi,
Till now i am not found any document .
I think symantec Empolyee will response this thread or you can contact to symantec support.
May be symantec support will be provide document.
How to create a new case in MySymantec (formerly MySupport)
Regional Support Telephone Numbers:
United States: 800-342-0652 (407-357-7600 from outside the United States)
Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
United Kingdom: +44 (0) 870 606 6000
Additional contact numbers: http://www.symantec.com/business/support/contact_techsupp_static.jsp
Thanks In Advance
Ashish Sharma
SEPM Knowledgebase Documents
Hello,
Duplicate Thread to : https://www-secure.symantec.com/connect/forums/client-stops-and-starts-again
Could you try disabling the Active Scan from the machines, when virus definitions arrive and check if that helps!!
Note: This is just to test and segregate the issue.
Hope that helps!!
Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3
Twitter: @mithun_sanghavi
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a
No, its still the same. Disconnecting @ around 10 AM everyday. Do i need to do something else or just this setting is okay?
smc.exe is only for communicating with the manager, all the scan properties like autoprotect is taken care by ccsvhst.exe .if it just restarts after few millisecs . I wont mind as its working perfectly fine.
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
i have configured Network access protection, systems get restricted even if the SEP client is stopped for few milli sec.
What is configuration set for the Host Integrity check frequency for your clients? By default it would be every few minutes - so during the smc service disconnection for few seconds you should not see that much of an issue.
I'm using Network Policy Server, the same checks the Health State (AV client) in real-time. Once AV and other checks are stopped. The System is moved to a restricted network.
Once the SEP client starts, the system is given full access.
Would you like to reply?
Login or Register to post your comment.