Endpoint Protection

Hi, we got cluster nodes here and when we mount the lun´s then we get sporadic errors. Windows is telling us that the lun´s are corrupt and damaged.

When we DEACTIVATE the MR5-Client (smc -stop) then it works fine on the cluster-nodes-servers.

The error message is as follows


Any Idea?

Thanks in advance

Michael

Can you check this link.

Installing a Symantec Endpoint Protection client to a cluster server


http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008120113202748

Hi, we will try that out tonight and i will let ya know of the results.

Thanks for the Info

Michael

Hi Cormac

We just switched from 4202 to 5002 last week and our MS cluster server just got the same crash, the quorum disk was being locked by SMC after running for 3 days and all errors as shown by you were reported.

Now MS had suggested to disabled the SMC and the cluster is back, but I just wonder if I have to switch back to 4202 soon as possible ! Also wonder why the same was not happened in 4202 as it was ran for 2 months, so far no problems reported.

Would you share what finally you had did to your servers ...

Thanks

We have the same problem after switching from 4202 to 5002. After removing Symantec EPP 5002 cluster working fine.

I have the same problem in my costumer.

Could anyone help us?

Thank you very much,

Hi Cormac,

Did you succeed after following this procedure?
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008120113202748


Thanks

I have the same issue.  Did Symantec acknowledge the issue yet?

Getting exactly the same error as shown in the first post.


Does anyone have a fix for this??

Hi All,

I have had Symantec Support to debug our problem and it appears to be a known issue internally in Symantec??????? Wonder why this is not made public yet???

As to Symantec, this problem should only excist on Windows 2003 Cluster (MSCS) running RU5.
They are planning a fix, but it might not be implemented until RU6!!!!!

This seems mad, as this is supposed to be an enterprise product....Why is this patch not a priority to Symantec???

But conclusion on Windows 2003 cluster-nodes is: Downgrade to MR4 MP2 and then it all works perfectly again.

If you want to make sure that you have the exact same symptoms, then try running the sysinternals tool: handle.exe with the "-p" option and pipe it to a text file.
Search for Q: (in my case the Quorum drive) and if you see that the smc pid has an -RW lock on the drive, then you know this is the same problem.

Good luck with the next version of SEP. :-)

Symantec,

I have been dealing with your shoddy products full time for the past few months. This problem has been reported back in October '09, and there is still no fix for the customer affected? I hardly consider downgrading to an older version of Endpoint a solution, especially since this version has issues of it's own.

When is this going to be fixed?

Symantec,

Please update this if this issue has been resolved already and put the solution in this Forum.

Thanks,

We just ran into this issue too.   Can someone from Symantec at least confirm that this will be fixed in RU6?

We just ran into this issue too.   Can someone from Symantec at least confirm that this will be fixed in RU6?

Hello,

Is it the same issue with VCS 5.0 / Windows 2003 cluster ?

Jean-Louis.

The KB article that Thomas refers to above says that it is now fixed in RU6.

I havent tested this yet though, i just set our services to disabled for now and need to look at the upgrade now....

sigh... thanks symantec :(

its been fixed, however use the Micorosofthandle.exe in case you come across this error :-(

Anyone know if this is fixed in MR6 MP1?

Curtiplas - yes this has been fixed in MR6 MP1, we have it running on our cluster nodes now without issue.