Endpoint Protection Small Business Edition

 View Only

  • 1.  Scan are getting Stuck for days, neither it finish nor the new start

    Posted Sep 10, 2012 04:45 PM

    Hello.

    I have a few servers connected to a Symantec Endpoint Protection Small Business Edition Manager 12.1.671.4971

    I installed all the client without any problem but for some reason, the scans are getting stuck and I'm not able to cancel it or delete it and the new scan are cancelled.

    I have read a lot from the forum but I was not able to get the solution, the only think that works is uninstalling the client and installing it again but i demand two reboots and I can do this because all the servers are in production.

    In some of the server with the issue, if I go to the Scan's Logs I can see it as running but in another there are not logs.

    I tried the following solution with the followint results:

    Kill the Rvscan service ---------> This service is not running in thist server

    Stop SEP Service --------> Access Denied.

    Stop SMC Service --------> Acces Denied.

    Change some key on the register from 1 to 0 --------> Access Denied

    Try with another admin user ---------------> Same result

    Try to send a new scan from the console or from the Scan Log -------> Another scan is running, please wait

     

    Thanks so much for your help.

    Have an excellent day.



  • 2.  RE: Scan are getting Stuck for days, neither it finish nor the new start

    Trusted Advisor
    Posted Sep 11, 2012 03:08 AM

    Hello,

    You are runinng the RTM version of SEP 12.1 and it is recommeded to migrate to the Latest version of SEP 12.1 RU1 and later to SEP 12.1 RU1 MP1.

    Secondly, check this Article:

    How can I stop an unwanted scan on a Symantec Endpoint Protection (SEP) 12.1 client.

    http://www.symantec.com/docs/TECH171788

    and this Thread: 

    https://www-secure.symantec.com/connect/forums/disabling-triggered-scans-sep-121

    Hope that helps!!



  • 3.  RE: Scan are getting Stuck for days, neither it finish nor the new start

    Posted Sep 11, 2012 05:01 PM

    Thanks.

    First of all, what "RU1" is?

    How can I migrate? Can I downloaded the upgrade or do I have to buy something?

    What will happens with the clients installed.

     

    Again, thanks so much



  • 4.  RE: Scan are getting Stuck for days, neither it finish nor the new start

    Posted Sep 11, 2012 09:38 PM

     

    SEP SBE 12.1.x

     Name

     Version

      Release date (English)

     RTM

     12.1.671.4971   

     July 2011

     RU1

     12.1.1000.157

     Nov 2011
     RU1 MP1  12.1.1101.401  May 2012

    You  need to download the latest version from the symantec website.

     

    Obtaining the latest version of Symantec Endpoint Protection

     http://www.symantec.com/docs/TECH103088

    Upgrading or migrating to SEPM 12.1 RU1

    http://www.symantec.com/docs/TECH174545

     
     
     
    Hope this helps........

     

     


  • 5.  RE: Scan are getting Stuck for days, neither it finish nor the new start

    Trusted Advisor
    Posted Sep 12, 2012 03:07 AM

    Hello,

    To Explain in simple terms - 

    RTM - Release To Manufacturing

    MR - Maintenance Release (replaced by RU)

    RU - Release Update

    MP - Maintenance Patch

    PP - Point Patch

    Check this Article to understand What are the Symantec Endpoint Protection (SEP) versions released officially?

    https://www-secure.symantec.com/connect/articles/what-are-symantec-endpoint-protection-sep-versions-released-officially

    You do not have to buy anything, simply download the Latest version of SEP SBE 12.1 RU1 and SEP SBE 12.1 RU1 MP2 DVD from https://fileconnect.symantec.com/

     

    For Migration check these Articles:

    1) How to upgrade the Symantec Endpoint Protection Manager (SEPM) to Version 12.1 RU1

    http://www.symantec.com/docs/TECH176260

    2) a) Upgrading or migrating to Symantec Endpoint Protection 12.1.1000 (RU1)

    http://www.symantec.com/business/support/index?page=content&id=TECH174545

    b) Upgrading or migrating to Symantec Endpoint Protection 12.1.1101 (RU1 MP1)

    http://www.symantec.com/business/support/index?page=content&id=TECH187753

    Once, you follow the steps provided in the Articles the Client machine would be automatically migrated to  the Latest versions.

    Hope that helps!!



  • 6.  RE: Scan are getting Stuck for days, neither it finish nor the new start

    Broadcom Employee
    Posted Sep 12, 2012 03:19 PM

    Hi,

    There is a fix id in SEP 12.1 RU1.

    Scheduled scan runs repeatedly in a multi-user environment
     
    Fix ID: 2613428/2618423
     
    Symptom: Multiple users have scans scheduled to run at or near the same time. As soon as one finishes, the next one starts.
     
    Solution: This release introduces a new registry value which can be added by the administrator to disable all user scans:
    HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint
    Protection\AV\AdministratorOnly\General\EnableUserScans = 0
    The administrator can add EnableUserScans as a DWORD. When the value is 0 all user scans are disabled. When the value does not exist or is non-zero, all user scans are enabled (default behavior). Administrator-defined scans are not affected by this registry value.
     

    Upgrade to the SEP 12.1 RU1

    Upgrade path is : SEP 12.1.671.4971(RTM) --> SEP 12.1.1000.157 RU1

    Note: You can't directly upgrade to SEP 12.1 RU1 MP1.

    Check till date SEP releases: http://bit.ly/m0vOJp