Endpoint Protection

Currently running MR4, and suddenly, some machines have stopped receiving updates from the SEPM. Most are still working properly.

Here's the SylinkMonitor log from one of the affected machines. Any ideas?

Thanks,
Wayne

------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

10/29 08:03:30 [416] HEARTBEAT: Check Point 1
10/29 08:03:30 [416] HEARTBEAT: Check Point 2
10/29 08:03:30 [416] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
10/29 08:03:30 [416] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
10/29 08:03:30 [416] HEARTBEAT: Check Point 3
10/29 08:03:30 [416] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
10/29 08:03:30 [416] HEARTBEAT: Check Point 4
10/29 08:03:30 [416] <IndexHeartbeatProc>===Get Index STAGE===
10/29 08:03:30 [416] ************CSN=2143
10/29 08:03:30 [416] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=2E3538E80A2801A100AD4D40E0931B8A&chk=82EC682CBF5F9724631647C024E6CCEF&ck=7529C981DD5C90C12BED11A39F68B192&uchk=DD4C39D773A266DC75B4D1A98A3DFA90&uck=F7595D3A9DB2C3E056A7193841D51D72&hid=00E85070F0AD4812B45ADDCA485DB32A&groupid=6DCE2C5E0A2801A100D48578CB21E593&mode=0&hbt=600&as=2143&cn=[hex]4F5048423132524D3133392D3036&lun=[hex]7761796E65&udn=[hex]434353442E4C4F43414C
10/29 08:03:30 [416] <GetIndexFileRequest:>http://10.40.1.161:80/secars/secars.dll?h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
10/29 08:03:30 [416] <GetIndexFileRequest:>SMS return=200
10/29 08:03:30 [416] <ParseHTTPStatusCode:>200=>200 OK
10/29 08:03:30 [416] <mfn_DoGetIndexFile200>Content Lenght => 1177
10/29 08:03:30 [416] <SignIf::VerifySignature> Siganture NOT specified to verify ..
10/29 08:03:30 [416] <mfn_DoGetIndexFile200>Signature verification FAILED for Index File Content..
10/29 08:03:30 [416] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
10/29 08:03:30 [416] <GetIndexFileRequest:>COMPLETED
10/29 08:03:30 [416] <IndexHeartbeatProc>GetIndexFile handling status: 101
10/29 08:03:30 [416] <IndexHeartbeatProc>Switch Server flag=0
10/29 08:03:30 [416] HEARTBEAT: Check Point 5.1
10/29 08:03:30 [416] <ScheduleNextUpdate>new scheduled heartbeat=64 seconds
10/29 08:03:30 [416] HEARTBEAT: Check Point 8
10/29 08:03:30 [416] Get Next Server!
10/29 08:03:30 [416] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
10/29 08:03:30 [416] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
10/29 08:03:30 [416] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 08:03:30 ======
10/29 08:03:30 [416] <IndexHeartbeatProc>Set Heartbeat Result= 1
10/29 08:03:30 [416] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 1, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
10/29 08:03:30 [416] <IndexHeartbeatProc>Connection Failed! No. of tries = 1
10/29 08:03:30 [416] Use new configuration
10/29 08:03:30 [416] HEARTBEAT: Check Point Complete
10/29 08:03:30 [416] <IndexHeartbeatProc>Done, Heartbeat=64seconds
10/29 08:03:30 [416] </CSyLink::IndexHeartbeatProc()>
10/29 08:03:30 [416] <CheckHeartbeatTimer>====== Heartbeat loop stops at 08:03:30 ======
10/29 08:04:19 [3684] <CSyLink::mfn_DownloadNow()>
10/29 08:04:19 [3684] </CSyLink::mfn_DownloadNow()>
10/29 08:04:35 [416] <CheckHeartbeatTimer>====== Heartbeat loop starts at 08:04:35 ======
10/29 08:04:35 [416] <GetOnlineNicInfo>:Netport Count=1
10/29 08:04:35 [416] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.12.36.99" Mac="00-19-b9-47-20-d3" Gateway="10.12.36.10" SubnetMask="0.0.0.0"/></SSANICs>
10/29 08:04:35 [416] <CalcAgentHashKey>:CH=6DCE2C5E0A2801A100D48578CB21E5931OPHB12RM139-06CCSD.LOCAL00E85070F0AD4812B45ADDCA485DB32A
10/29 08:04:35 [416] <CalcAgentHashKey>:CHKey=82EC682CBF5F9724631647C024E6CCEF
10/29 08:04:35 [416] <CalcAgentHashKey>:C=6DCE2C5E0A2801A100D48578CB21E5931OPHB12RM139-06CCSD.LOCAL
10/29 08:04:35 [416] <CalcAgentHashKey>:CKey=7529C981DD5C90C12BED11A39F68B192
10/29 08:04:35 [416] <CalcAgentHashKey>:UCH=6DCE2C5E0A2801A100D48578CB21E5930wayneCCSD.LOCALOPHB12RM139-06CCSD.LOCAL00E85070F0AD4812B45ADDCA485DB32A
10/29 08:04:35 [416] <CalcAgentHashKey>:UCHKey=DD4C39D773A266DC75B4D1A98A3DFA90
10/29 08:04:35 [416] <CalcAgentHashKey>:UC=6DCE2C5E0A2801A100D48578CB21E5930wayneCCSD.LOCALOPHB12RM139-06CCSD.LOCAL
10/29 08:04:35 [416] <CalcAgentHashKey>:UCKey=F7595D3A9DB2C3E056A7193841D51D72
10/29 08:04:36 [416] <DoHeartbeat>HardwareID=00E85070F0AD4812B45ADDCA485DB32A
10/29 08:04:36 [416] <DoHeartbeat>CHKey=82EC682CBF5F9724631647C024E6CCEF
10/29 08:04:36 [416] <DoHeartbeat>CKey=7529C981DD5C90C12BED11A39F68B192
10/29 08:04:36 [416] <DoHeartbeat>UCHKey=DD4C39D773A266DC75B4D1A98A3DFA90
10/29 08:04:36 [416] <DoHeartbeat>UCKey=F7595D3A9DB2C3E056A7193841D51D72
10/29 08:04:36 [416] <DoHeartbeat> Set heartbeat event
10/29 08:04:36 [416] Use new configuration
10/29 08:04:36 [416] <CSyLink::IndexHeartbeatProc()>
10/29 08:04:36 [416] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 01B8B258
10/29 08:04:36 [416] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 08:04:36 ======
10/29 08:04:36 [416] HEARTBEAT: Check Point 1
10/29 08:04:36 [416] Get First Server!
10/29 08:04:36 [416] <GetFirstSEMServer> Selecting a random server
10/29 08:04:36 [416] <GetFirstServer> Using server '10.40.1.161'
10/29 08:04:36 [416] HEARTBEAT: Check Point 2
10/29 08:04:36 [416] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
10/29 08:04:36 [416] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
10/29 08:04:36 [416] HEARTBEAT: Check Point 3
10/29 08:04:36 [416] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
10/29 08:04:36 [416] HEARTBEAT: Check Point 4
10/29 08:04:36 [416] <IndexHeartbeatProc>===Get Index STAGE===
10/29 08:04:36 [416] ************CSN=2144
10/29 08:04:36 [416] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=2E3538E80A2801A100AD4D40E0931B8A&chk=82EC682CBF5F9724631647C024E6CCEF&ck=7529C981DD5C90C12BED11A39F68B192&uchk=DD4C39D773A266DC75B4D1A98A3DFA90&uck=F7595D3A9DB2C3E056A7193841D51D72&hid=00E85070F0AD4812B45ADDCA485DB32A&groupid=6DCE2C5E0A2801A100D48578CB21E593&mode=0&hbt=600&as=2144&cn=[hex]4F5048423132524D3133392D3036&lun=[hex]7761796E65&udn=[hex]434353442E4C4F43414C
10/29 08:04:36 [416] <GetIndexFileRequest:>http://10.40.1.161:80/secars/secars.dll?h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
10/29 08:04:36 [416] <GetIndexFileRequest:>SMS return=200
10/29 08:04:36 [416] <ParseHTTPStatusCode:>200=>200 OK
10/29 08:04:36 [416] <mfn_DoGetIndexFile200>Content Lenght => 1177
10/29 08:04:36 [416] <SignIf::VerifySignature> Siganture NOT specified to verify ..
10/29 08:04:36 [416] <mfn_DoGetIndexFile200>Signature verification FAILED for Index File Content..
10/29 08:04:36 [416] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
10/29 08:04:36 [416] <GetIndexFileRequest:>COMPLETED
10/29 08:04:36 [416] <IndexHeartbeatProc>GetIndexFile handling status: 101
10/29 08:04:36 [416] <IndexHeartbeatProc>Switch Server flag=0
10/29 08:04:36 [416] HEARTBEAT: Check Point 5.1
10/29 08:04:36 [416] <ScheduleNextUpdate>new scheduled heartbeat=128 seconds
10/29 08:04:36 [416] HEARTBEAT: Check Point 8
10/29 08:04:36 [416] Get Next Server!
10/29 08:04:36 [416] <IndexHeartbeatProc>switch to another server
10/29 08:04:36 [416] <DecrementScheduleTime:>New scheduled heartbeat=64 seconds
10/29 08:04:37 [416] HEARTBEAT: Check Point 1
10/29 08:04:37 [416] HEARTBEAT: Check Point 2
10/29 08:04:37 [416] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
10/29 08:04:37 [416] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
10/29 08:04:37 [416] HEARTBEAT: Check Point 3
10/29 08:04:37 [416] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
10/29 08:04:37 [416] HEARTBEAT: Check Point 4
10/29 08:04:37 [416] <IndexHeartbeatProc>===Get Index STAGE===
10/29 08:04:37 [416] ************CSN=2145
10/29 08:04:37 [416] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=2E3538E80A2801A100AD4D40E0931B8A&chk=82EC682CBF5F9724631647C024E6CCEF&ck=7529C981DD5C90C12BED11A39F68B192&uchk=DD4C39D773A266DC75B4D1A98A3DFA90&uck=F7595D3A9DB2C3E056A7193841D51D72&hid=00E85070F0AD4812B45ADDCA485DB32A&groupid=6DCE2C5E0A2801A100D48578CB21E593&mode=0&hbt=600&as=2145&cn=[hex]4F5048423132524D3133392D3036&lun=[hex]7761796E65&udn=[hex]434353442E4C4F43414C
10/29 08:04:37 [416] <GetIndexFileRequest:>http://COSEPM:80/secars/secars.dll?h=30A3051B2EE0072F8C233FC852E42E530BBEEBB28CA2F0A215D75FAF5047D1E94FF6E4F56793EEB920EB0A2088908B23C594972F2AC686EDF4DABEAD8FDE1E884803FB4B3A571D711E23D6D7DD2A2FD00623F3572E81891E3CB69052D5A7860A3F9F82E55DD407D2E65ED535F60CD923AFDD2284604E7217D2D85EC0959D13C9798831F8351613FC78FFDC0E1C4EA57991F6E2174D66658C0CABF141AD030791D579CE127806EB62867551905AF736B8322605518BC868CE2CA5CE548BF74889733CF03577C81C772FDC148B22491FA8A7C2ED37FDD2DA50783F6EFFE3BAB6A80F02FA3FA7C2B0AC842DB29DC766B50A012FF635F50149E0C1B0A3AF7014071C6E1B64EA5912490D80B367FF033C705DE5046E649289216A962C526CA79B8D029032368A94932BD1F2CC88D8AB2C3538F1EB56E920C533A590F9FB5D6E392909ED529EEF500B12ABBFE650F981A304B60D13963A284830FACE8AE815CB2B2B0699AFC5E7AD4217A3B52B7CFEDCA9823883A68ED99EEFD23771071884E27C2F56555E020CD08FF0C7C9C8212F8340F6B5
10/29 08:04:37 [416] <GetIndexFileRequest:>SMS return=200
10/29 08:04:37 [416] <ParseHTTPStatusCode:>200=>200 OK
10/29 08:04:37 [416] <mfn_DoGetIndexFile200>Content Lenght => 1177
10/29 08:04:37 [416] <SignIf::VerifySignature> Siganture NOT specified to verify ..
10/29 08:04:37 [416] <mfn_DoGetIndexFile200>Signature verification FAILED for Index File Content..
10/29 08:04:37 [416] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
10/29 08:04:37 [416] <GetIndexFileRequest:>COMPLETED
10/29 08:04:37 [416] <IndexHeartbeatProc>GetIndexFile handling status: 101
10/29 08:04:37 [416] <IndexHeartbeatProc>Switch Server flag=0
10/29 08:04:37 [416] HEARTBEAT: Check Point 5.1
10/29 08:04:37 [416] <ScheduleNextUpdate>new scheduled heartbeat=128 seconds
10/29 08:04:37 [416] HEARTBEAT: Check Point 8
10/29 08:04:37 [416] Get Next Server!
10/29 08:04:37 [416] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
10/29 08:04:37 [416] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
10/29 08:04:37 [416] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 08:04:37 ======
10/29 08:04:37 [416] <IndexHeartbeatProc>Set Heartbeat Result= 1
10/29 08:04:37 [416] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 1, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
10/29 08:04:37 [416] <IndexHeartbeatProc>Connection Failed! No. of tries = 2
10/29 08:04:37 [416] Use new configuration
10/29 08:04:37 [416] HEARTBEAT: Check Point Complete
10/29 08:04:37 [416] <IndexHeartbeatProc>Done, Heartbeat=128seconds
10/29 08:04:37 [416] </CSyLink::IndexHeartbeatProc()>
10/29 08:04:37 [416] <CheckHeartbeatTimer>====== Heartbeat loop stops at 08:04:37 ======

Hi,

In the logs, it is visible that the error "Index Verification failed" exists. PLease follow the KB to resolve this issue:
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/9f59cecda30bb55fca257392000212bc?OpenDocument

Aniket

Thanks for the reply Aniket, but it didn't work for me.

I followed the instructions in the referenced KB article and the client still won't update. I ran the SylinkWatcher again, and still receive the same message as in the above listing.

Any other ideas?

Thanks!
Wayne

I think I have seen this with MR2...

On one of the affected client, try changing the field

VerifySignatures="1"  to VerifySignatures="0"

in Sylink.xml

If it works, there could be a certificate issue. Try to restore from the backup if you have taken one.

Sandeep, that didn't make any difference.

I went through all the troubleshooting steps layed out at http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/16638b5449556ae3882574c200793618?OpenDocument but ran into one interesting thing. I cannot telnet to 8014 on the managing server from *any* client on our network. Mind you, most clients are working just fine, so I'm wondering if Symantec has changed the port again? I know it used to be 80...

I did another SylinkMonitor and here's the log:

10/30 07:46:31 [3568] <CheckHeartbeatTimer>====== Heartbeat loop starts at 07:46:31 ======
10/30 07:46:32 [3568] <GetOnlineNicInfo>:Netport Count=1
10/30 07:46:32 [3568] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.12.36.99" Mac="00-19-b9-47-20-d3" Gateway="10.12.36.10" SubnetMask="0.0.0.0"/></SSANICs>
10/30 07:46:32 [3568] <CalcAgentHashKey>:CH=6DCE2C5E0A2801A100D48578CB21E5931OPHB12RM139-06CCSD.LOCAL00E85070F0AD4812B45ADDCA485DB32A
10/30 07:46:32 [3568] <CalcAgentHashKey>:CHKey=82EC682CBF5F9724631647C024E6CCEF
10/30 07:46:32 [3568] <CalcAgentHashKey>:C=6DCE2C5E0A2801A100D48578CB21E5931OPHB12RM139-06CCSD.LOCAL
10/30 07:46:32 [3568] <CalcAgentHashKey>:CKey=7529C981DD5C90C12BED11A39F68B192
10/30 07:46:32 [3568] <CalcAgentHashKey>:UCH=6DCE2C5E0A2801A100D48578CB21E5930wayneCCSD.LOCALOPHB12RM139-06CCSD.LOCAL00E85070F0AD4812B45ADDCA485DB32A
10/30 07:46:32 [3568] <CalcAgentHashKey>:UCHKey=DD4C39D773A266DC75B4D1A98A3DFA90
10/30 07:46:32 [3568] <CalcAgentHashKey>:UC=6DCE2C5E0A2801A100D48578CB21E5930wayneCCSD.LOCALOPHB12RM139-06CCSD.LOCAL
10/30 07:46:32 [3568] <CalcAgentHashKey>:UCKey=F7595D3A9DB2C3E056A7193841D51D72
10/30 07:46:32 [3568] <DoHeartbeat>HardwareID=00E85070F0AD4812B45ADDCA485DB32A
10/30 07:46:32 [3568] <DoHeartbeat>CHKey=82EC682CBF5F9724631647C024E6CCEF
10/30 07:46:32 [3568] <DoHeartbeat>CKey=7529C981DD5C90C12BED11A39F68B192
10/30 07:46:32 [3568] <DoHeartbeat>UCHKey=DD4C39D773A266DC75B4D1A98A3DFA90
10/30 07:46:32 [3568] <DoHeartbeat>UCKey=F7595D3A9DB2C3E056A7193841D51D72
10/30 07:46:32 [3568] <DoHeartbeat> Set heartbeat event
10/30 07:46:32 [3568] Use new configuration
10/30 07:46:32 [3568] <CSyLink::IndexHeartbeatProc()>
10/30 07:46:32 [3568] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 01B672E8
10/30 07:46:32 [3568] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 07:46:32 ======
10/30 07:46:32 [3568] HEARTBEAT: Check Point 1
10/30 07:46:32 [3568] Get First Server!
10/30 07:46:32 [3568] <GetFirstServer> Using server '10.40.1.161'
10/30 07:46:32 [3568] HEARTBEAT: Check Point 2
10/30 07:46:32 [3568] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
10/30 07:46:32 [3568] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
10/30 07:46:32 [3568] HEARTBEAT: Check Point 3
10/30 07:46:32 [3568] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
10/30 07:46:32 [3568] HEARTBEAT: Check Point 4
10/30 07:46:32 [3568] <IndexHeartbeatProc>===Get Index STAGE===
10/30 07:46:32 [3568] ************CSN=2276
10/30 07:46:32 [3568] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=869815CF0A2801A10169C3986A67031E&chk=82EC682CBF5F9724631647C024E6CCEF&ck=7529C981DD5C90C12BED11A39F68B192&uchk=DD4C39D773A266DC75B4D1A98A3DFA90&uck=F7595D3A9DB2C3E056A7193841D51D72&hid=00E85070F0AD4812B45ADDCA485DB32A&groupid=6DCE2C5E0A2801A100D48578CB21E593&mode=0&hbt=600&as=2276&cn=[hex]4F5048423132524D3133392D3036&lun=[hex]7761796E65&udn=[hex]434353442E4C4F43414C
10/30 07:46:32 [3568] <GetIndexFileRequest:>http://10.40.1.161:80/secars/secars.dll?h=30A3051B2EE0072F8C233FC852E42E53A7ACE604426D41C9EB9A63B5231D48AE2D4091F53C05926EC14A973B8849D8EA9F0B4DA0B2D47A8E57005AEF3313BD564803FB4B3A571D711E23D6D7DD2A2FD00623F3572E81891E3CB69052D5A7860A3F9F82E55DD407D2E65ED535F60CD923AFDD2284604E7217D2D85EC0959D13C9798831F8351613FC78FFDC0E1C4EA57991F6E2174D66658C0CABF141AD030791D579CE127806EB62867551905AF736B8322605518BC868CE2CA5CE548BF74889733CF03577C81C772FDC148B22491FA8A7C2ED37FDD2DA50783F6EFFE3BAB6A80F02FA3FA7C2B0AC842DB29DC766B50A012FF635F50149E0C1B0A3AF7014071C6E1B64EA5912490D80B367FF033C705DE5046E649289216A962C526CA79B8D02ABF8468CD30F21FD872D3A93FE7E3931F1EB56E920C533A590F9FB5D6E392909ED529EEF500B12ABBFE650F981A304B60D13963A284830FACE8AE815CB2B2B0699AFC5E7AD4217A3B52B7CFEDCA9823883A68ED99EEFD23771071884E27C2F56555E020CD08FF0C7C9C8212F8340F6B5
10/30 07:46:33 [3568] <GetIndexFileRequest:>SMS return=200
10/30 07:46:33 [3568] <ParseHTTPStatusCode:>200=>200 OK
10/30 07:46:33 [3568] <mfn_DoGetIndexFile200>Content Lenght => 1178
10/30 07:46:33 [3568] <SignIf::VerifySignature> Siganture NOT specified to verify ..
10/30 07:46:33 [3568] <mfn_DoGetIndexFile200>Signature verification FAILED for Index File Content..
10/30 07:46:33 [3568] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
10/30 07:46:33 [3568] <GetIndexFileRequest:>COMPLETED
10/30 07:46:33 [3568] <IndexHeartbeatProc>GetIndexFile handling status: 101
10/30 07:46:33 [3568] <IndexHeartbeatProc>Switch Server flag=0
10/30 07:46:33 [3568] HEARTBEAT: Check Point 5.1
10/30 07:46:33 [3568] <ScheduleNextUpdate>new scheduled heartbeat=32 seconds
10/30 07:46:33 [3568] HEARTBEAT: Check Point 8
10/30 07:46:33 [3568] Notify Server down!
10/30 07:46:33 [3568] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
10/30 07:46:33 [3568] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
10/30 07:46:33 [3568] Get Next Server!
10/30 07:46:33 [3568] <IndexHeartbeatProc>switch to another server
10/30 07:46:33 [3568] HEARTBEAT: Check Point 1
10/30 07:46:33 [3568] HEARTBEAT: Check Point 2
10/30 07:46:33 [3568] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
10/30 07:46:33 [3568] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
10/30 07:46:33 [3568] HEARTBEAT: Check Point 3
10/30 07:46:33 [3568] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
10/30 07:46:33 [3568] HEARTBEAT: Check Point 4
10/30 07:46:33 [3568] <IndexHeartbeatProc>===Get Index STAGE===
10/30 07:46:33 [3568] ************CSN=2277
10/30 07:46:33 [3568] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=869815CF0A2801A10169C3986A67031E&chk=82EC682CBF5F9724631647C024E6CCEF&ck=7529C981DD5C90C12BED11A39F68B192&uchk=DD4C39D773A266DC75B4D1A98A3DFA90&uck=F7595D3A9DB2C3E056A7193841D51D72&hid=00E85070F0AD4812B45ADDCA485DB32A&groupid=6DCE2C5E0A2801A100D48578CB21E593&mode=0&hbt=600&as=2277&cn=[hex]4F5048423132524D3133392D3036&lun=[hex]7761796E65&udn=[hex]434353442E4C4F43414C
10/30 07:46:33 [3568] <GetIndexFileRequest:>http://COSEPM:80/secars/secars.dll?h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
10/30 07:46:33 [3568] <GetIndexFileRequest:>SMS return=200
10/30 07:46:33 [3568] <ParseHTTPStatusCode:>200=>200 OK
10/30 07:46:33 [3568] <mfn_DoGetIndexFile200>Content Lenght => 1178
10/30 07:46:33 [3568] <SignIf::VerifySignature> Siganture NOT specified to verify ..
10/30 07:46:33 [3568] <mfn_DoGetIndexFile200>Signature verification FAILED for Index File Content..
10/30 07:46:33 [3568] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
10/30 07:46:33 [3568] <GetIndexFileRequest:>COMPLETED
10/30 07:46:33 [3568] <IndexHeartbeatProc>GetIndexFile handling status: 101
10/30 07:46:33 [3568] <IndexHeartbeatProc>Switch Server flag=0
10/30 07:46:33 [3568] HEARTBEAT: Check Point 5.1
10/30 07:46:33 [3568] <ScheduleNextUpdate>new scheduled heartbeat=64 seconds
10/30 07:46:33 [3568] HEARTBEAT: Check Point 8
10/30 07:46:33 [3568] Get Next Server!
10/30 07:46:33 [3568] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
10/30 07:46:33 [3568] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
10/30 07:46:33 [3568] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 07:46:33 ======
10/30 07:46:33 [3568] <IndexHeartbeatProc>Set Heartbeat Result= 1
10/30 07:46:33 [3568] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 1, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
10/30 07:46:33 [3568] <IndexHeartbeatProc>Connection Failed! No. of tries = 1
10/30 07:46:33 [3568] Use new configuration
10/30 07:46:33 [3568] HEARTBEAT: Check Point Complete
10/30 07:46:33 [3568] <IndexHeartbeatProc>Done, Heartbeat=64seconds
10/30 07:46:33 [3568] </CSyLink::IndexHeartbeatProc()>
10/30 07:46:33 [3568] <CheckHeartbeatTimer>====== Heartbeat loop stops at 07:46:33 ======

***[0xe04]:[2009-10-30 07:47:10:552]***SylinkMonitor Stopped

Fist you find out the port of which sepm installed .By default is it 8014(It is customizable).If you are installed in default web site it is 80. Anyway you can find out it from iis manager.(It will show in the properties of the website which is used by sepm).If you are not able to telnet that port check for any firewall setting which block this traffic.

 

https://www-secure.symantec.com/connect/articles/troubleshooting-client-commuincation 

@AravindKM - The link you posted is broken.

 https://www-secure.symantec.com/connect/articles/troubleshooting-client-commuincation