Endpoint Protection

Hi

suddently, the console stopped working.

If we login then we are pushed back to login again, no errors

All windows services are started

All clients can connect to remote manager

I also tryed to update SEP to 14 MP1 but no luck

these are the last lines of scm-server-0

2017-02-24 18:57:54.813 THREAD 82 INFO: EELicenseHelper.getOverdeploymentClientCount(). No overdeployment
2017-02-24 18:57:54.813 THREAD 82 FINEST:  LicenseStatusHandler: license status is <?xml version="1.0" encoding="UTF-8"?><LicenseStatusInfo overdeployedCount="0" clientProductType="0" licenseState="SEPE_PAID" NameSpace="rpc"/>
2017-02-24 18:57:54.829 THREAD 83 FINEST: Console use case retrieved from cookie = HOMEPAGEVIEW
2017-02-24 18:57:54.829 THREAD 83 FINEST: Console use case added to request data
2017-02-24 18:57:54.829 THREAD 83 FINEST: ***** CONSOLE SERVLET Action Type = GetObject Admin Credential = null Session id = 61F0B6265DAD4F72BC63F88D218C2F70
2017-02-24 18:57:54.829 THREAD 83 FINE: Request = GetObject AdminCredential = null
2017-02-24 18:57:54.829 THREAD 83 FINE: Admin Credential Retrieved
2017-02-24 18:57:54.829 THREAD 83 FINE: Console Use case = HOMEPAGEVIEW
2017-02-24 18:57:54.829 THREAD 83 FINEST: localSettings.siteId=5012D9C52E10BEE555B1420BBDD81A79
2017-02-24 18:57:54.829 THREAD 83 INFO: HTTP Session[61F0B6265DAD4F72BC63F88D218C2F70] was destroyed.
2017-02-24 18:57:54.844 THREAD 84 INFO: HTTP Session[55B559A88B0F9C239C490CD69F6B4509] was created.
2017-02-24 18:57:54.844 THREAD 84 FINEST: Console use case retrieved from cookie = HOMEPAGEVIEW
2017-02-24 18:57:54.844 THREAD 84 FINEST: Console use case added to request data
2017-02-24 18:57:54.844 THREAD 84 FINEST: ***** CONSOLE SERVLET Action Type = GetObject Admin Credential = null Session id = 55B559A88B0F9C239C490CD69F6B4509
2017-02-24 18:57:54.844 THREAD 84 FINE: Request = GetObject AdminCredential = null
2017-02-24 18:57:54.844 THREAD 84 FINE: Console Use case = HOMEPAGEVIEW
2017-02-24 18:57:54.844 THREAD 84 FINEST: localSettings.siteId=5012D9C52E10BEE555B1420BBDD81A79
2017-02-24 18:57:54.844 THREAD 84 INFO: HTTP Session[55B559A88B0F9C239C490CD69F6B4509] was destroyed.
2017-02-24 18:57:56.875 THREAD 40 FINE: RequestHandlerCache >> No domains to refresh
2017-02-24 18:57:56.875 THREAD 40 FINE: RequestHandlerCacheRefreshTask >> No admins to refresh
2017-02-24 18:58:01.876 THREAD 40 FINE: RequestHandlerCache >> No domains to refresh
2017-02-24 18:58:01.876 THREAD 40 FINE: RequestHandlerCacheRefreshTask >> No admins to refresh
2017-02-24 18:58:02.641 THREAD 41 FINEST: IISCacheTask.execute(): isTestClientConcedeNumber = false
2017-02-24 18:58:02.641 THREAD 41 FINEST: IISCacheTask.execute(): maxUsn = 1519150
2017-02-24 18:58:02.641 THREAD 41 FINEST: IISCacheTask.execute(): currentMetadataUsn = 1519150
2017-02-24 18:58:02.641 THREAD 41 FINEST: IISCacheTask.updateAgentCache(): currentClientUsn = 1514781
2017-02-24 18:58:02.641 THREAD 41 FINEST: IISCacheTask.updateAgentCache(): resetClient = false
2017-02-24 18:58:02.641 THREAD 41 FINEST: IISCacheTask.updateAgentCache(): Will do updateLastRun()
2017-02-24 18:58:06.891 THREAD 40 FINE: RequestHandlerCache >> No domains to refresh
2017-02-24 18:58:06.891 THREAD 40 FINE: RequestHandlerCacheRefreshTask >> No admins to refresh
2017-02-24 18:58:10.485 THREAD 36 FINEST: ProcessManager>> Registered the Process java.lang.ProcessImpl@4854a385
2017-02-24 18:58:10.547 THREAD 36 FINEST: ProcessManager>> Unregistered the Process java.lang.ProcessImpl@4854a385
2017-02-24 18:58:11.891 THREAD 40 FINE: RequestHandlerCache >> No domains to refresh
2017-02-24 18:58:11.891 THREAD 40 FINE: RequestHandlerCacheRefreshTask >> No admins to refresh
2017-02-24 18:58:12.641 THREAD 41 FINEST: IISCacheTask.execute(): isTestClientConcedeNumber = false
2017-02-24 18:58:12.641 THREAD 41 FINEST: IISCacheTask.execute(): maxUsn = 1519150
2017-02-24 18:58:12.641 THREAD 41 FINEST: IISCacheTask.execute(): currentMetadataUsn = 1519150
2017-02-24 18:58:12.641 THREAD 41 FINEST: IISCacheTask.updateAgentCache(): currentClientUsn = 1514781
2017-02-24 18:58:12.641 THREAD 41 FINEST: IISCacheTask.updateAgentCache(): resetClient = false
2017-02-24 18:58:12.641 THREAD 41 FINEST: IISCacheTask.updateAgentCache(): Will do updateLastRun()
2017-02-24 18:58:13.672 THREAD 41 INFO: AgentOnlineStatusTask.updateInvalidAgentCache url = : http://localhost:8014/secars/secars.dll?action=31&reset=0

Any help on this? I already tryed 99% of help found on this forum.

Thanks

Does SymDiag show any error messages?

You may want to get a support case opened up.

Hi,

no, SymDiag does not complain about anything except disk space(still 40gb left)

How can I open the support case ?

Thanks

Create one online:

https://support.symantec.com/en_US/mysymantec.html

or call:

https://support.symantec.com/en_US/contact-support.html?

Non of this helped.

I submitted an official support request.

Investigating the logs a little more i found this in scm-server-0.log

 

2017-02-26 19:31:13.949 THREAD 42 SEVERE: Error during SecurityDataTask -- threatcon processing error: cannot load threatcon processing engine

 

And is other logs i found this

2017/02/27 09:41:44:038 : main : Initiating new JVMProcess on RMI[1100] -- Params[[sepm, 1100, 84903538]]
2017/02/27 09:41:44:554 : RMI TCP Connection(1)-46.16.190.229 : [com.creamtec.ajaxswing.ClientAgentImpl] Initialization complete, instances in JVM = 1
2017/02/27 09:41:55:054 : Thread-2 : WARN: Failed to set look and feel or look and feel change not allowed by AjaxSwing (Exception java.lang.RuntimeException, Changing look and feel not allowed, use agent.allowLFChange=true)
java.lang.RuntimeException: Changing look and feel not allowed, use agent.allowLFChange=true
    at com.creamtec.ajaxswing.laf.AjaxSwingLookAndFeel.uninitialize(AjaxSwingLookAndFeel.java:67)
    at javax.swing.UIManager.setLookAndFeel(UIManager.java:526)
    at com.sygate.scm.common.ui.CustomLookAndFeel.setDefaults(CustomLookAndFeel.java:224)
    at com.sygate.scm.console.ConsoleMain.main(ConsoleMain.java:860)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at com.creamtec.ajaxswing.core.ClientAgent.loadAndRun(ClientAgent.java:793)
    at com.creamtec.ajaxswing.core.ClientAgent.doRun(ClientAgent.java:746)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at com.creamtec.ajaxswing.core.AjaxSwingThread.doVoidMethodVoid(AjaxSwingThread.java:179)
    at com.creamtec.ajaxswing.core.AjaxSwingThread.run(AjaxSwingThread.java:64)
2017/02/27 09:41:55:960 : AWT-EventQueue-1 : WARN: Failed to render component with com.creamtec.ajaxswing.v4.render.TemplateRendererImpl@4ea40301 (Exception freemarker.core.InvalidReferenceException, Expression style is undefined on line 16, column 26 in custom-component\com.sygate.scm.console.ui.LoginPanel.html.)

Expression style is undefined on line 16, column 26 in custom-component\com.sygate.scm.console.ui.LoginPanel.html.
The problematic instruction:
----------
==> ${style} [on line 16, column 24 in custom-component\com.sygate.scm.console.ui.LoginPanel.html]
----------

Java backtrace for programmers:
----------
freemarker.core.InvalidReferenceException: Expression style is undefined on line 16, column 26 in custom-component\com.sygate.scm.console.ui.LoginPanel.html.
    at freemarker.core.TemplateObject.assertNonNull(TemplateObject.java:125)
    at freemarker.core.Expression.getStringValue(Expression.java:118)
    at freemarker.core.Expression.getStringValue(Expression.java:93)
    at freemarker.core.DollarVariable.accept(DollarVariable.java:76)
    at freemarker.core.Environment.visit(Environment.java:221)
    at freemarker.core.MixedContent.accept(MixedContent.java:92)
    at freemarker.core.Environment.visit(Environment.java:221)
    at freemarker.core.Environment.process(Environment.java:199)
    at freemarker.template.Template.process(Template.java:259)
    at com.creamtec.ajaxswing.v4.render.TemplateRendererImpl.renderComponent(TemplateRendererImpl.java:50)
    at com.creamtec.ajaxswing.v4.ComponentGraphics.beginRender(ComponentGraphics.java:788)
    at com.creamtec.ajaxswing.v4.ComponentGraphics.setRenderingHint(ComponentGraphics.java:361)
    at javax.swing.JComponent.paint(JComponent.java:1091)
    at javax.swing.JComponent.paintChildren(JComponent.java:888)
    at javax.swing.JComponent.paint(JComponent.java:1108)
    at javax.swing.JComponent.paintChildren(JComponent.java:888)
    at javax.swing.JComponent.paint(JComponent.java:1108)
    at javax.swing.JLayeredPane.paint(JLayeredPane.java:586)
    at javax.swing.JComponent.paintChildren(JComponent.java:888)
    at javax.swing.JComponent.paint(JComponent.java:1108)
    at java.awt.GraphicsCallback$PaintCallback.run(GraphicsCallback.java:39)
    at sun.awt.SunGraphicsCallback.runOneComponent(SunGraphicsCallback.java:79)
    at sun.awt.SunGraphicsCallback.runComponents(SunGraphicsCallback.java:116)
    at java.awt.Container.paint(Container.java:1975)
    at java.awt.Window.paint(Window.java:3904)
    at com.creamtec.ajaxswing.v4.AjaxSwingV4Renderer.paintComponent(AjaxSwingV4Renderer.java:89)
    at com.creamtec.ajaxswing.v4.AjaxSwingV4Renderer.renderComponent(AjaxSwingV4Renderer.java:68)
    at com.creamtec.ajaxswing.rendering.html.HTMLPageRenderer.renderWindow(HTMLPageRenderer.java:237)
    at com.creamtec.ajaxswing.rendering.html.HTMLPageRenderer.appendBody(HTMLPageRenderer.java:148)
    at com.creamtec.ajaxswing.rendering.html.HTMLPageRenderer.renderDocument(HTMLPageRenderer.java:127)
    at com.creamtec.ajaxswing.rendering.html.HTMLClientAgent$1.run(HTMLClientAgent.java:397)
    at java.awt.event.InvocationEvent.dispatch(InvocationEvent.java:301)
    at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:756)
    at java.awt.EventQueue.access$500(EventQueue.java:97)
    at java.awt.EventQueue$3.run(EventQueue.java:709)
    at java.awt.EventQueue$3.run(EventQueue.java:703)
    at java.security.AccessController.doPrivileged(Native Method)
    at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:76)
    at java.awt.EventQueue.dispatchEvent(EventQueue.java:726)
    at com.creamtec.ajaxswing.gui.SchedulingEventQueue.dispatchEvent(SchedulingEventQueue.java:57)
    at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:201)
    at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:116)
    at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:105)
    at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)
    at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:93)
    at java.awt.EventDispatchThread.run(EventDispatchThread.java:82)
2017/02/27 09:41:55:975 : AWT-EventQueue-1 : WARN: Failed to render component with com.creamtec.ajaxswing.v4.render.TemplateRendererImpl@32397c6b (Exception freemarker.core.InvalidReferenceException, Expression style is undefined on line 16, column 47 in custom-component\com.sygate.scm.console.ui.util.DescriptionTextArea.html.)

Thanks 

By any chance did you upgrade the JAVA version?

Not recently.

Thanks

any update on this perticular issue from Support?

I am facing similar issue

I solved the issue thanks to advanced support from symantec(and a bit of mine).

Download process monitor 

https://technet.microsoft.com/en-us/sysinternals/processmonitor.aspx

and monitor the process php-cgi.exe

In particular check for registry read problem: the fix is to add correct permission to registry keys for the user NT SERVICE\semwebsrv

If your problem is similar to mine, this wil solve the issue