Endpoint Protection

 View Only
  • 1.  Offline clients increasing

    Posted Mar 23, 2017 05:57 PM

    Hi, we currently have 582 "Offline" devices, caused by abandoned VDI clients, and I've just now set the domain properties to delete inactive and non-persistent VDI clients that are over 1 day old, but I was just wondering how long it will be before the clients start disappearing by themselves.

    It seems like almost every day up to now I've had to log in and manually delete hundreds of dead VDI clients... and please don't tell me it will occur during the next heartbeat, because the heartbeat is set to something like 5 minutes (I haven't checked but I know it isn't long).

    What I am looking for is a specific amount of time until the clients start disappearing.  Do I have to wait overnight or something?

    Thanks,
    Dan



  • 2.  RE: Offline clients increasing

    Posted Mar 23, 2017 06:11 PM
    Typically, 24 hours after that setting change is made.


  • 3.  RE: Offline clients increasing

    Posted Mar 23, 2017 06:16 PM

    Thanks Brian... I'll keep watch on it and by tomorrow afternoon I'm hoping they'll disappear.

    But I have another SEPM server with a slightly different configuration with other VDI clients, and it's been set at "1" for both the inactive and non-persistent VDI connections for about a year... and I still have to manually delete those.  Is there an issue with this setting?



  • 4.  RE: Offline clients increasing

    Posted Mar 23, 2017 06:20 PM
    Not to my knowledge. Exact sepm version?


  • 5.  RE: Offline clients increasing

    Posted Mar 23, 2017 06:27 PM

    12.1.7004.6500, across the board.



  • 6.  RE: Offline clients increasing

    Posted Mar 23, 2017 06:33 PM
    So I'm assuming the last connection date on those are well over a day old?


  • 7.  RE: Offline clients increasing

    Posted Mar 23, 2017 06:36 PM

    The date in the "Last Time Status Changed" column in the Default View of the SEPM console says today's date, but a lot of them are duplicates - one is offline, the other is online, repeated for every client that's listed in the console.  As for the specific age of the offline clients, where would I look?



  • 8.  RE: Offline clients increasing

    Posted Mar 23, 2017 06:40 PM
    Sounds like a duplicate HWID issue, which can be fixed: http://www.symantec.com/docs/TECH163349 There are specific steps to cloning SEP clients: http://www.symantec.com/docs/HOWTO54706


  • 9.  RE: Offline clients increasing

    Posted Mar 23, 2017 06:43 PM

    Ok, I'll give those a look.  Thanks (for now -- I might be back, lol!)



  • 10.  RE: Offline clients increasing

    Posted Mar 23, 2017 06:44 PM
    Sounds good. Let me know if you need anything.


  • 11.  RE: Offline clients increasing

    Posted Mar 23, 2017 10:40 PM

    Hi Dan43,

    I'm going through a VDI/SEP integration at the moment.  Do you also have the registry key from the article below added to your VDI PC's?

    How to manage the license count for non-persistent VDI clients

    https://support.symantec.com/en_US/article.HOWTO81134.html#v75347177

    It appears to use that, as well as the purge setting to clean out stale VDI clients.  The contractor building part of ours put in the registry values for 32 bit clients instead of 64-bit (he followed something he found on google which only showed the 32-bit reg values).  We've just corrected that, so I'm waiting to see if they purge correctly.

    PS:  5 minutes is a very quick heartbeat - best practice for VDI is 1 hour....but maybe you have an environment with lots of grunt :)

    Hope this helps,

    Steve