Endpoint Protection

As the title suggests, I can't get my SEP 11 clients to receive definition updates from the SEP Manager server after a replication.

The site used to have 1 server and around 15 clients, when another server was introduced and it was decided that Symantec Manager Console would be moved to the second server. The second server was set up as a replication server and all looked to be ok.

Most of the clients are checking in to the new server (as it can't be the old server because we have uninstalled SEPMC from that machine)

The second server was set up to download updates from symantec's Live Update and then the clients should look to the server to update.

We are also receiving a few errors when you click on Admin -> servers;


28 September 2009 12:56:19:  The binary file[598E37F2CF397E88CBEC99458213B30C] referred at the physical file[8AD6F4A95BA222345D8ABF4D76AC797C], which is referred at the software package[8D5F1CA44E2184F8698AF5442E6D06B1,Symantec Endpoint Protection (version 11.0.3001.0) for WIN32BIT], does not exist.

and

28 September 2009 12:55:41:  Failed to create a folder to which to publish the package

Any help would be appreciated. Considering it's only a small site, maybe totally uninstalling and reinstalling may be the quickest and easiest method?

Kindly verfiy, are the clients showing server offline, or they are showing the ip address/name of the new server. to do this, on the client side, go to, help and support and troubleshooting. If the clients have server offline, you may need to replace the sylink.xml file on the clients.

Thanks Vishal,

The server is offline on the clients. I have already replaced the sylink.xml file (twice) and most client machines are reporting into the new server on a regular basis (when viewed through the clients menu in the SEP Management console)

Thanks for any help.

post the sylink monitor logs.

where can I find them?

do you have the sylink monitor tool available, run it while the client is updated for policy. run the tool to gather the logs for 10 minutes and past that save the log and post it here..

I don't have it. I'll get a hold of it tomorrow and try it then. So just run it on a client machine?

From below links you can download sylink monitor and sylink toggle on/off tools

Sylink Monitor

https://www-secure.symantec.com/connect/downloads/sylink-monitor

Sylink Toggle

https://www-secure.symantec.com/connect/downloads/sylink-toggle

For MR3 and above you have to run toggle on tool along with sylink monitor  to get logs.

 

hi,

In your earlier post you have mentioned that  "most client machines are reporting into the new server on a regular basis (when viewed through the clients menu in the SEP Management console)" . So do you see the clients appearing with a green dot in the manager console or without a green dot ?

I guess if on the clients its showing Server as Offline then they should not show up in the SEPM as Online (means with a green dot).

However, as you have only 15 clients this is what you can try out.

Note: If you are not running on SEP RU5. You may also at the same time like to download the same from the https://fileconnect.symantec.com using your product serial number, Upgrade the SEPM to RU5 and then follow the below mentioned steps.
          After the Product is being downloaded,make sure you first Right click on the downloaded Zipped folder for  Symantec Endpoint Protection and go to its properties.You would see Unblock button at the right bottom of that window. Click on it. Then Click Apply and OK. Now Extract the same folder by using the extract all option.

We have to create new packages with custom settings mentioned in the screenshot below for the groups that you have in your SEPM and then redeploy the package on the clients.

Deploying the package.

Step 1: Go to Start > All Programs > Symantec Endpoint Protection Manager > 

             Migration and Deployment Wizard.

Step 2: Click Next.

Step 3: Select the first option that says Deploy the client.

            NOTE: Do Not select the Second option i.e. Migrate from earlier version of

                          Symantec Antivirus. Even if you have Symantec Antivirus Installed.

                          This option is mainly used in large networks.

Step 4: Now Select the Second option “Select an Existing Package to deploy.”

Step 5: Click Finish.

Step 6: Browse to the location where package was saved.

Step 7: Add the Computers.

            NOTE: If you get an Error message that says “NO NETWORK PROVIDER

                         FOUND THE GIVEN PATH” .

                        -Check the Windows Firewall.

                        -Check the Ping Status between the Server and the client.

                        -Check the Local Security policy on the client machine end.

As you had performed Replication, You may also like to check the MSL i.e Management Server List for your Groups in the new SEPM.

This is how you can find the Management Server List..

In the SEPM,

• click on the Clients Options.
• Higlight the group that you have created.
• Then Click on the Policies Tab of the Group.
• You will see Communication Settings for that group.Click on it.
• Now we should have a drop dwon menu at the top, which will have the Management Server List.

 Make sure you have the Correct Management Server List for this SEPM applied on all the groups.

The management list is fine for the group, it is one my ex colleague created.

the clients (most of them) are showing up with green dots, not all of the time though. A screenshot is below, most of the computer at the site would be off at the moment, so you can compare dates in the screenshot. I never really managed this site and other sites that I work with don't have symantec installed, since my colleague left I've kind of been 'dropped in it'.

the computer BXM had a green dot when I took the screenshot, not sure why it's yellow.

Thanks for your help.

http://img143.imageshack.us/i/img1xnf.jpg/

hi,

Try creating the package for the Bugg group the way i have mentioned above and deploy the package again.

Please update what happens after that. But make sure you follow the steps that I have mentioned above.

SEP RU5 wasn't available for download when I logged in, so I continued without performing that installation.

It all seemed to go fine, a few screenshots and the log are below. I guess it's a waiting game now to see how it goes?

http://img230.imageshack.us/i/step1s.jpg/

http://img22.imageshack.us/i/step2r.jpg/

http://img22.imageshack.us/i/step3r.jpg/

09/30/09 09:08:27 - Deployment Finished for: Rmt1
09/30/09 09:08:31 - Deployment Finished for: Dww
09/30/09 09:08:38 - Deployment Finished for: Ljb
09/30/09 09:08:42 - Deployment Finished for: Bxm
09/30/09 09:08:48 - Deployment Finished for: Cmb
09/30/09 09:08:51 - Deployment Finished for: Ipg
09/30/09 09:08:57 - Deployment Finished for: Gajlt
09/30/09 09:08:58 - Deployment Finished for: Dbg
09/30/09 09:08:58 - Deployment Finished for: Rxm
09/30/09 09:08:59 - Deployment Finished for: Dxk
09/30/09 09:09:07 - Deployment Finished for: Rmf
09/30/09 09:09:10 - Deployment Finished for: Scn2
09/30/09 09:09:12 - Deployment Finished for: Cjh
09/30/09 09:09:23 - Deployment Finished for: Tml
09/30/09 09:09:50 - Deployment Finished for: Scn
09/30/09 09:10:16 - Deployment Finished for: Amc

hi,

May be you can check the https://fileconnect.symantec.com once again for the SEP RU5.

However if redeploying the new package with custom settings has worked for you, would you please mark my post as solution.

The only English download I have available when I log in is:

Symantec Multi-Tier Protection Small Business Edition 11.0.2 - International English

11.0.5

International English

Redeploying the new package did not solve the issue.

Thanks.

bump!

Well, I'm going to site tonight to reinstall.

Wasn't expecting people to give up really, even if you had suggested a reinstall may be the best course of action, would have been better than just disappearing.

Well..firstly I apologise as i wasnt availble on the forums for a couple of weeks.

Even I wouldn't like to give up on anything, However now that you are reinstalling the product on the site, my recommendation would be to create the package as mentioned earlier or Please call Symantec Tech support . Please don't take this wrong, i don't mean to challenge you expertise however i intend things to go smoother on your end.