Endpoint Protection

Using SEP12.1.5, but it was the same in 12.1.4

Within the SEPM console I open the Exceptions policy for a group and click on 'Exceptions' on the left side. Then i click the Add button, choose Windows Exceptions, then click on Application. The drop down disappears but then nothing happens! No expected pop-up or anything. If i choose 'Applications to Monitor', or any of the other options, i get a pop-up window, but not for Applications.

Thinking that i would need to monitor an application first, i added one to test with and i can see them in the list if i click 'Search for Applications' on the policy screen, but this hasn't helped.

I should mention that this worked a while ago and i had created an exception without problem. This current problem started since i deleted the old exception, leaving the list empty.

Tried Googling, but can't find any related issues from anyone else.

Any help would be appreciated.

Thanks

Darren

Post the error snapshot.

Even for small environments, I've known this list to take a loooooong time to appear.  How long are you allowing?

Does it actually error out at any point?

I can confirm it works fine in my environment.

Even if  no apps are present a windows should still pop up

Test it out by putting in a name such as explorer.exe....see if it eventually shows up. Maybe something was changed in RU5 in regards to this if no apps present then no window....

I have waited for at least 5 minutes with no further clicking, but no window pops up. I will test with waiting longer.

I was doing the same before i upgraded to 12.1.5. I was hoping that the upgrade would help.

No error message on screen, i have checked the Windows Event Viewer, nothing there either. Is there a SEPM log file i can check for this?

Thanks

Might be worth having a rummage around the scm-server-0.log file in the below deirectory on the SEPM:

Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tomcat\logs

30 minutes, no error, no pop-up. I will leave it for longer, but i'm losing hope for that theory. It does all the other pop-up windows almost immediately.

Could there be anything else i should check before raising a support call?

Thanks

Run the upgrade.bat. and check it can work or not.

Hold off on upgrade.bat. Follow SMLatCST's advice first.

todays entries from the scm-server-0.log:

2014-10-02 00:00:24.910 THREAD 49 WARNING: AgentSweepingTask>>updateDeadlockFailureNumber>> Update failure count into DB as:0
2014-10-02 03:12:50.722 THREAD 41 WARNING: LuCatalogExe> run>> System is not installing nor upgrading, so execute the LuCatalog.exe by Launch Service.
2014-10-02 07:33:53.141 THREAD 41 WARNING: LuCatalogExe> run>> System is not installing nor upgrading, so execute the LuCatalog.exe by Launch Service.
2014-10-02 07:34:08.187 THREAD 41 WARNING: LiveUpdateTask >> launchLU > LiveUpdate Launched, return code:  1

LiveUpdate worked ok at 11:53 today. Not sure what the AgentSweepingTask refers to?

Thanks