Endpoint Protection

Hello dear forum participants!

I have a followin problem with Symantec Endpoint Protection Manager Console:

SEP Manager home shows: Security Status - Attention Needed; When I click "More Detail">"Scan Failures" or "Antivirus Definition Update Failures" it shows me that all workstations on my site have scan or update problems oO. While local status of the clients is ok: they are updated and scanned successfully.

Where may be the problem?

Thanks in addvance

Look like a problem fixed in RU5.Which is your SEPM version?

from the status take a client

find the group

create a scan report for that group

do you have scan configured in policy? can u check that?

Yes the scan is configured in policy

In the AV /As policy go to miscellaneous--->log handling and assure that scan related events are selected....

does the detail gives you the timestamp?

if yes can you compare with the one see on the client logs?

If you mean "Virus Definition Update Information", "New Virus Definition Assigned", "Scan Started", "Scan stopped", "Scan aborted" those states are enabled...

Yes details on Manager provide me the time stamp as well as the client AV, but they are different

In SEPM go to Monitors-->logs-->scan select appropriate time range and click on view log.Are you able to get some scan information here?

Try by repairing the SEPM from add/remove programs....

Is this only the solution?

Noting else is coming in my mind now....

One new sighnificant point: the Security Status information about AVs on servers is correctly displayed. May be that would be helpful.

Sorry for the late thoughts...

Yes, the scan time stamp in "Monitors>logs>scan" log is identical with local client's report but differ from "Security Status>details" report time stam of "Last Scan".....

Why does this information displayed incorrectly in Security Status?

SEPM version is: 11.0.6005.562 

May be a query scripts problem and as far as I know IIS is responsible for this activity.It uses php scripts.Restart your SEPM once......