Endpoint Protection

Hi Everyone,

I am having a very strange problem with the SEPM, I have configured GUP at one remote location, and installed other clients manually at remote location. Now GUP is connecting/showing in SEPM console but clients are not connecting/showing in SEPM console. I have done all possible things but still I am facing the issue. Any possible help will be a great benefit for me..

Thank You

Saurabh Damle

Are you not getting the green dot on the SEP client?

In one of the problematic client go to Help and support ---->troubleshooting what is the group and sever it is showing? 

I am getting the green dot on GUP but I am not getting green dot on SEP clients.

I have checked the problematic client in Troubleshooting it is showing me Offline

https://www-secure.symantec.com/connect/articles/troubleshooting-client-commuincation

Did you use the same package as that used on GUP, if not test it on one client machine and see if it updates, if it reflects in SEPM console, you may need to drop sylink.xml file on other client machines.

make sure windows firewall is off on your clients.
 

Testing Communication from an Endpoint Protection client to the Endpoint Protection Manager 
Troubleshooting communication problems between the management server and the client

Hi pete,

yes i have used the same GUP package for clients, ive also replaced the sylink.xml file but still clients are not able to connect...

can i replace the sylink.xml file copied from GUP..

hi rafeeq,

firewall is off sir..but the problem is i am able to see GUP in console but not clients..??

Check this possibility also
SEP 11 Client does not communicate with the Manager Server Console 

yes, try copying the sylink.xml from GUP and copy it on client machine ( showing offline). If the issue still persists, run post the sylink.log here.

I am attaching the screenshot of  Report scanned by SEP Support  Please have a look at it and let me know..

Thank You

its complaining about DNS
check what your GuP has and your clients have as DNS settings
 

How can I check DNS on client settings??

He is telling about TCP/IP settings..i.e,what we assign to the network card..

start-run - ncpa.cpl
select Internet protocal
propeties
advanced
dns ( check this dns for your Gup client and other client)
are they same?
do they come in same subnet or use same dns server? 

Hi Rafeeq,

Tell me one thing Rafeeq sir,
 

I have installed SEP client on Two Machines at remote locations for testing purpose
I have different IP Address Range at my remote locations
I have opened port for GUP(2967) in Firewall bi-directional, so it is communicating with SEPM
So, My question is, I have to open ports of SEPM (8014) bi-directional in Firewall for that whole IP Range at remote location for communication for the clients..

 

 

Yes sir...
on the remote machine when you open a browser and test this you should get okay response.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007101711140148 

Yes, sorry..
I have asked a question to Rafeeq..Please read my question and let me know if I am right or wrong..


Thank you

Yes you have to open 8014 also bidirectional. 

Which communication ports does Symantec Endpoint Protection 11.0 use?

Hi

I think I got a solution why clients were not reporting to SEPM, I have not opened the ports for that whole range...

And why  I am getting a OK reply from GUP only...

 

Hi

So this means I have to open the ports bi-directional for the whole IP range???

There you GO!!! YOu need to open the ports :)))
Good that the issue is resolved now, happy weekend.. 

Hi

I have to open the ports for the whole IP Range... ;) ;) :)

Thank You For All Your Help..

Hi Aravind

Thank You sir for all your help, and support..