Endpoint Protection

Hi Team,

We combine both SAV and SEP...
one issue is , a computer is seen both in SAV and SEP as active.
could that be possible?

Thanks.

Really? Can you log to the consoles and check the check-time of the client computer? Is this happening on all workstations?

@Paul Mapacpac: Yes. I will. Just take some time since the site is on another floor.
or maybe just RDP it.
Thanks.

I guess if you inspected SEP console and client is there, we can delete the client on the SSC console (SAV). If it reappears/check-in again on SAV then we might have a problem. Is this happening on all workstations? Btw, is the workstation on dual boot or dual network?

@Paul Mapacpac: it is just single boot & Network.
If I delete it in SAV, what happens if it is detected again after server sweep?
Just asking since deleting the PC in SAV is the most easiest solution.

By the way saw that the PC only has SEP installed right now... but still being detected by SAV.
How long is SAV retention period for workstations?

thanks.

If I am not mistaken, by default. Client inventories are run every minute.

@Paul Mapacpac: That is what I was thinking.
What do you think happen , why SAV wont release the PC.
Any thoughts team?

thanks.

Could be a cache problem, can you delete the client on the SSC console?

thanks.

Was it a glitch in the system?
manual deletion is the only solution for now?

we will initiate that task.
will give you feedback later.
Hope this resolve the issue.
thanks again.

I haven't encountered this before, but let's see if the other users have this case.

thanks Paul.

You could also try to do a Clear Cache on the SSC console.

@Paul Mapacpac: how would we know if the client has already been migrated to SEPM?
would there be other ways to check before deleting to SSC?
thanks...

When migrating we can check it in many different ways, after you pushed the installation via the ClientRemote Tool, on the server side you will see it on the clients Page. on the workstation side, you will see the new shield icon on the system tray with green dot.

As per procedure, when we install SEP over SAV, it should automatically uninstall SAV then install SEP, (sometimes it needs restart)

but in this case, please investigate your SEP _inst.Log if you are having problems on a particular workstation.