Video Screencast Help

Sylink.xml and It's Contents

Created: 27 Jul 2012 • Updated: 09 Aug 2012 | 1 comment
Language Translations
Chetan Savade's picture
+8 8 Votes
Login to vote

Hello Everyone,

Sylink.xml stores the global communication settings. This file is for internal use only and should not be edited. It contains settings from the Symantec Endpoint Protection Manager. If you edit this file, most settings will be overwritten by the settings from the management server the next time the client connects to the management server.

Sylink file is an XML file containing communication settings and following  files :-

A list of SEPM servers to connect to

The public SEPM certificate for all servers.

The KCS, or encryption key.

The DomainID that the client belongs to.

PUSH/Pull connection setting

Various log settings

Many times we do observe that even after replacing sylink.xml clients does not communicate.

Sylink.xml contains following information, we can compare exported Sylink.xml file with non communicating clients sylink.xml.

Basic comparison can help to troubleshoot the issue further.

1) Compare Domain ID

2) KCS Value

3) Communication Mode

4)  Management Server list 

5) Preferred Group

6) Server IP address, hostname.

Sylink.xml file overview.

Enabled = 0, Disabled = 1


<?xml version="1.0" encoding="UTF-8" ?>
- <ServerSettings DomainId="87DXXXXXXXXXXXXXXXXXXXXXXXX69A" NameSpace="rpc">
- <CommConf>
  <AgentCommunicationSetting AlwaysConnect="1" CommunicationMode="PUSH" DisableDownloadProfile="0" Kcs="5CD564A466665A0333B3B710C0D506F1" PushHeartbeatSeconds="300" RandomizationEnabled="1" RandomizationRange="300" RememberCurrentGroup="0" RememberCurrentPolicyMode="1" UploadCmdStateHeartbeatSeconds="300" UploadLearnedApp="0" UploadLogHeartbeatSeconds="300" UploadOpStateHeartbeatSeconds="300" />
- <ServerList Name="Default Management Server List for My Site">
- <ServerPriorityBlock Name="Priority1">
  <Server Address="" HttpPort="8014" HttpsVerifyCA="0" VerifySignatures="1" />
  <Server Address="TEST" HttpPort="8014" HttpsVerifyCA="0" VerifySignatures="1" />
- <ServerCertList>
  <LogSetting MaxLogRecords="100" SendingLogAllowed="1" UploadProcessLog="1" UploadRawLog="1" UploadSecurityLog="1" UploadSystemLog="1" UploadTrafficLog="1" />
  <RegisterClient PreferredGroup="My Company\Test-Group1" PreferredMode="1" />


It's informative to know from where sylink.log file pull up this information.

Domain ID is pull up from following location

SEPM --> Admin --> Domains

KCS =  KCS Hash key which is used to encrypt URL strings when communicating with the SEPM server. The server's and client's KCS keys must match for clients to communicate

Communication settings are pullup from following location:

SEPM --> Clients --> Policies --> Communication settings

MSL information is pull up from following location

SEPM --> Policies --> Policy Componenets --> Management Server list

Group structure is pull up from following location

My Company --> Test Group-1

I hope this is been informative.

Comments 1 CommentJump to latest comment

John Santana's picture

Thanks forhe very specific and detailed article Chetan !

Kind regards,

John Santana
IT Professional


The author cannot accept liability for any loss or damage sustained as a result of the content of this post.

Login to vote