Endpoint Protection Small Business Edition

 View Only
Expand all | Collapse all

SEP SBE Cloud Management Console Shows No Firewall Activity

  • 1.  SEP SBE Cloud Management Console Shows No Firewall Activity

    Posted Aug 16, 2016 02:52 PM
      |   view attached

    I have 40+ clients being managed from the Cloud Management Console.  Firewall is enabled on all clients.  The home screen shows no activity.  Is this expected?



  • 2.  RE: SEP SBE Cloud Management Console Shows No Firewall Activity

    Posted Aug 16, 2016 02:57 PM

    Your Last Update time is: N/A. That should not be. Try clicking the refresh tab to see what happens.

    If you spot check a client log on the client (View History >> under Show set it to Firewall - Network and Connections or Firewall - Firewall Activities - what comes up?

    Also, I assume, but, verify the client is connected.



  • 3.  RE: SEP SBE Cloud Management Console Shows No Firewall Activity

    Posted Aug 16, 2016 03:18 PM

    If I click refresh, nothing happens.  It goes back to the same message.

    I checked a couple of clients, and they both show activity in the Firewall.

    firewall7.PNG

    If I click on the 'more...' link, it takes me to a Statistics page that I cannot find a way to navigate to otherwise.  But on this screen, I get "Unexpected Error" messages under all the Firewall links

    firewall2.PNG

    If I go to Reports and try to make a Firewall History report, the busy icon keeps spinning for a long time and the report never seems to become ready to view.



  • 4.  RE: SEP SBE Cloud Management Console Shows No Firewall Activity

    Posted Aug 16, 2016 03:32 PM

    You've also confirmed those clients are actively connected? Bottom left of the GUI will show a green check mark and "Connect to Symantec"



  • 5.  RE: SEP SBE Cloud Management Console Shows No Firewall Activity

    Posted Aug 16, 2016 03:37 PM

    Yes, both of the clients I checked on were my own computers.  Both connected.  We have over 40 clients, so I'd guess that at least one of those 40 would be connected when I'm trying to pull data in the Management Console.  As well, the Computers Tab shows many clients "online".



  • 6.  RE: SEP SBE Cloud Management Console Shows No Firewall Activity

    Posted Aug 16, 2016 03:41 PM

    What concerns me is the "unexpected error..." with no additional details given. Did you just migrate? Something may have gotten messed up. May need to open a support case.



  • 7.  RE: SEP SBE Cloud Management Console Shows No Firewall Activity
    Best Answer

    Posted Aug 16, 2016 03:47 PM

    Yes, I just migrated recently and got through another firewall-related issue:

    https://www.symantec.com/connect/forums/after-migrating-premise-cloud-all-network-traffic-blocked

    BTW, I just noticed that in my Policy "Report Blocked Events" was unchecked.  I just checked it and pushed the update out to the clients.  I think that might've been the problem.



  • 8.  RE: SEP SBE Cloud Management Console Shows No Firewall Activity

    Posted Aug 16, 2016 03:49 PM

    Hopefully so.

     



  • 9.  RE: SEP SBE Cloud Management Console Shows No Firewall Activity

    Posted Aug 16, 2016 04:35 PM

    Most Active Port is now showing some data, as is Top Blocked IP, but Firewall Events by Computer, Protocol Distribution and Firewall Trend are still showing Unexpected Error messages.  I'll give it some more time.



  • 10.  RE: SEP SBE Cloud Management Console Shows No Firewall Activity

    Posted Aug 17, 2016 12:34 PM

    Interesting.  I created a new group with IPS turned on (I have it disabled on the main group that everyone is in because we have an IPS in our firewall).  Then I added my two computers into the new group.  If I change the view to just show the group my two computers are in, then all the Firewall Statistics show normally.  So I don't know if it's the fact that IPS is turned off, or if there's an issue with one of the clients in the main group that is causing the Unexpected Error message.