Endpoint Protection

Hi,
I have a server environment and SEP update through the deploy system, all clients are connecting fine but just one is not showing green dot.
I have uninstalled the symantec and reinstalled it through the server SEP deploy wizard. I can't make the pc do live update as i want it to download the update from the server.

Thanks

can you provide any more info, What version your using, what you have and haven't tried etc

symantec endpoint protection, I have tried the push to deploy from the symantec server,
Uninstalled and reinstalled the symantec on the pc through the deply wizard, but it is still not showing the green dot and not updating, saying last update version 05 november 2008!!

Hi,

Please refer to the following article:

https://www-secure.symantec.com/connect/articles/troubleshooting-liveupdate-issues

Also, if you see that there is no green dot on the shield icon, and in help & support > troubleshooting inside the client GUI, you find that the server is offline, you can run the sylinkmonitor tool and look at errors in the logfile.

Best,
Aniket

I have 60 pc's connected to this symantec server.. all are getting their definition updates
but one is showing red cross on the pc.. and not showing as connected to the symantec server..
1.  On symantec endpoint manager I have added the pc but dont kno if i did it the right way but if i go through the deploy wizard, i can see the pc name there and thats the way i reinstalled the symantec on that computer.
2. When i go on the program files>symantec>symantec shared> the is no "sylink.xml" file in that folder..  does this file dont installed by itself when we install the symantec through the deploy way..
3. the pc is restricted to connect to the internet without going through the server so can't do live update..
I'm stressed
pleaseeeee help

Hi,

1. You shold not add a computer directly in SEPM. You must deploy an installation package so the client gets installed and then it automatically shos up in SEPM.

2. sylink.xml file is in c:\program files\symantec\symantec endpoint protection folder.

3. I think you should re-install the client on that machine and see if it gets connected.

Please refer  to the KB article below to export an installation package:

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/c741ec26fa674b1e8825738a0076abf3?OpenDocument

Best,
Aniket

I already uninstalled the symantec from the pc and reinstalled it, still not connecting
However the PC did had another name previously and was changed over some months back.. I was not here so dont know the exact date!! Can this affect it??

If the pc was previously connecting to the SEPM, the name should be on the SEPM list right..
But wehn i go there i cant see the name of the pc and if i go on unmanaged and do a search a see the previous name of the pc coming up as under Unkown category!!

In that case, please run the sylinkmonitor and post the logs.

Aniket

run it on the particular client computer which is not connecting??

yes. The logs from that client can let us know whats wrong.

when I unzip and run the sylinkmonitor file.. the box stays empty!! any reason for that??

Another thing I'm thinking of.. when i unistal the symantec on the pc through add and remove program, do i need to check if there is any symantec registry files left.. if so how do i find those!!
Thanks for your help..

Sylinkmonitor should remain empty if I recall correctly.  There are some registry modification you need to make.  Follow these instructions.  Also please post what version your clients are running to help us, help you.

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/4be077e14183395388257348007a2472?OpenDocument

if Sylinkmonitor remains empty does that means the symantec is running fine on the pc?

Symantec end point 2008, runing on a server..

1.  Configure registry changes for SylinkMonitor
     - Set registry key: HKLM\Software\Symantec\Symantec Endpoint Protection\SMC - smc_debuglog_on = 1
    - Stop SMC: START > RUN > smc –stop
    - Start SMC: START > RUN > smc –start 
2.  Run SylinkMonitor
3. On the client system, right click the SEP icon (near the clock) and choose Update Policy. 

If you do not see anything happening at this point there is something really wrong with the installation.

that smc -stop or smc -start, dont work for me, gets an error box..

I have checked the sylink.mxl on the pc with another user connecting fine.. its the same.. the only thing i remarked is that the setting box display under troubleshoot is direct.. seems like older.. I deploy the installation through the deploy wizard thou.. do i need to update the deploy installation on the deploy wizard to later version of the symantec or does the update do this automatically

See if you can get a simple web connection from the offline client to the SEPM server.
On the client that is offline, open your web browser and go to:
http://<SEPM_Server_IP_or_Machine_Name:Port>/secars?hello,secars
You can find the port number in your Sylink.xml file, the default is 8014.

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/a6b9dc2d869c89a58825737700642895?OpenDocument

This problem client isn't installed on the same machine as the SEPM server, is it?