Endpoint Protection

I have set up a sysmantec endpoint protection server which is work normally, I want to setup the other server for replication. however, it occur the error message of "unable to connect to the server specified" on replication.the replication cannot be continue. does any one know what procedure should be done to solve the problem

the KB article has the solution for the error you mentioned, check the link for resolution

http://www.symantec.com/business/support/index?page=content&id=TECH106224

I have found that the default value is JVM Option Number 0" to "-Xms512m and JVM Option Number 1" to "-Xmx1024m". and I try restart the service

the problem cannot be solve. any suggestion. thanks

is the remote server up?

can you telnet to that on port 8443? If there is any firewall allow this port .

telnet to the port OK. I have allow all port between the server. the primary site can see the replication partners. however the status is failed to connect.

thanks

can you post the scm-server-0.log after this event?

scm-server-o

 2011-12-08 16:28:17.406 SEVERE: ================== Server Environment ===================
2011-12-08 16:28:17.406 SEVERE: os.name = Windows Server 2008
2011-12-08 16:28:17.406 SEVERE: os.version = 6.1
2011-12-08 16:28:17.406 SEVERE: os.arch = x86
2011-12-08 16:28:17.406 SEVERE: java.version = 1.6.0_14
2011-12-08 16:28:17.406 SEVERE: java.vendor = Sun Microsystems Inc.
2011-12-08 16:28:17.421 SEVERE: java.vm.name = Java HotSpot(TM) Server VM
2011-12-08 16:28:17.421 SEVERE: java.vm.version = 14.0-b16
2011-12-08 16:28:17.421 SEVERE: java.home = D:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\jdk\jre
2011-12-08 16:28:17.421 SEVERE: catalina.home = D:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tomcat
2011-12-08 16:28:17.421 SEVERE: java.user = null
2011-12-08 16:28:17.421 SEVERE: user.language = en
2011-12-08 16:28:17.421 SEVERE: user.country = US
2011-12-08 16:28:17.421 SEVERE: scm.server.version = 11.0.6200.754
2011-12-08 16:28:23.234 SEVERE: ================== StartClientTransport ===================
2011-12-08 16:28:24.203 SEVERE: Schedule is started!
2011-12-08 16:29:33.355 SEVERE: com.sygate.scm.server.util.securitydata.ThreatData: Signature verification failed for Security Response outbreak information.
2011-12-08 16:32:38.267 SEVERE: Schedule is stopped!

Thanks
 

Attachment(s)

scm-server-0.txt.zip   3 KB 1 version

com.sygate.scm.common.communicate.CommunicationException: Failed to connect to the server.

Make sure that the server is running and your session has not timed out.
If you can reach the server but cannot log on, make sure that you provided the correct parameters.
If you are experiencing network issues, contact your system administrator. ErrorCode: 0x80020000
 at com.sygate.scm.common.communicate.Communicator.sendFileRequest(Communicator.java:731)
 at com.sygate.scm.server.replication.RemotePartnerCommunicator.getChangedMetadata(RemotePartnerCommunicator.java:365)
 at com.sygate.scm.install.util.SiteSynchronizer.getChangedMetadataFromRemoteSite(SiteSynchronizer.java:74)
 at com.sygate.scm.install.util.SiteSynchronizer.synchronizeSite(SiteSynchronizer.java:32)
 at com.sygate.scm.install.ui.MainFrame.replicateData(MainFrame.java:2925)
 at com.sygate.scm.install.ui.MainFrame.configureDB(MainFrame.java:1290)
 at com.sygate.scm.install.ui.MainFrame.nextBtnActionPerformed(MainFrame.java:838)
 at com.sygate.scm.install.ui.MainFrame.access$400(MainFrame.java:183)
 at com.sygate.scm.install.ui.MainFrame$3$1.construct(MainFrame.java:617)
 at com.sygate.scm.install.util.SwingWorker$2.run(SwingWorker.java:121)
 at java.lang.Thread.run(Thread.java:619)

its the network issue. Did you try telnet and ping from both SEPM's?

I have allow all port between the server and I have telnet for the port for test ok. the below is the primary server log

primary server scm-server-0

2011-12-09 18:18:49.252 SEVERE: ================== Server Environment ===================
2011-12-09 18:18:49.253 SEVERE: os.name = Windows Server 2008
2011-12-09 18:18:49.254 SEVERE: os.version = 6.1
2011-12-09 18:18:49.254 SEVERE: os.arch = x86
2011-12-09 18:18:49.254 SEVERE: java.version = 1.6.0_14
2011-12-09 18:18:49.254 SEVERE: java.vendor = Sun Microsystems Inc.
2011-12-09 18:18:49.255 SEVERE: java.vm.name = Java HotSpot(TM) Server VM
2011-12-09 18:18:49.255 SEVERE: java.vm.version = 14.0-b16
2011-12-09 18:18:49.255 SEVERE: java.home = D:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\jdk\jre
2011-12-09 18:18:49.255 SEVERE: catalina.home = D:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tomcat
2011-12-09 18:18:49.256 SEVERE: java.user = null
2011-12-09 18:18:49.256 SEVERE: user.language = en
2011-12-09 18:18:49.256 SEVERE: user.country = US
2011-12-09 18:18:49.256 SEVERE: scm.server.version = 11.0.6200.754
2011-12-09 18:18:51.829 SEVERE: ================== StartClientTransport ===================
2011-12-09 18:18:52.605 SEVERE: Schedule is started!
2011-12-09 18:20:04.367 SEVERE: com.sygate.scm.server.util.securitydata.ThreatData: Signature verification failed for Security Response outbreak information.
2011-12-09 18:20:04.809 SEVERE: Unknown Exception in: com.sygate.scm.server.util.securitydata.VirusData
java.io.FileNotFoundException: D:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tomcat\temp\indexE.html (The system cannot find the file specified)
 at java.io.FileInputStream.open(Native Method)
 at java.io.FileInputStream.<init>(FileInputStream.java:106)
 at java.io.FileInputStream.<init>(FileInputStream.java:66)
 at java.io.FileReader.<init>(FileReader.java:41)
 at com.sygate.scm.server.util.securitydata.VirusData.getVirusFromIndex(VirusData.java:138)
 at com.sygate.scm.server.task.SecurityDataTask.processVirusCats(SecurityDataTask.java:215)
 at com.sygate.scm.server.task.SecurityDataTask.run(SecurityDataTask.java:88)
 at java.util.TimerThread.mainLoop(Timer.java:512)
 at java.util.TimerThread.run(Timer.java:462)
 

it have error of D:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tomcat\temp\indexE.html. is it any problem for it

moreover, how to config the ODBC of the symantec??

thanks

it's basically testing ODBC connectivity, here is the link

http://www.symantec.com/business/support/index?page=content&id=HOWTO55031

Hello,

Is there are a Proxy on the Network??

If yes, Remove the proxy and restart the SEPM service or configure the proxy to allow the traffic.

I have already disable the proxy and restart the service . problem still occur

for the checking of ODBC,

I do not have SymantecEndpointSecurityDSN  in the primary server(step 4). so cannot try further

is it any problem for the embedded database?

there should be Symantec DSN , can you logon to primary server? can you do SEPM functionalities on this server?

can do anything on primary server

login ok

ahh.. yes this is win 64 bit OS, hence you will not see DSN. It's normal.

http://symantec.com/business/support/index?page=content&id=TECH102763

did you check the latest logs, does it still shows same error?

Hello,

Make sure the IP address of the SEPM is correct, with TCP port 8443

in such cases the db password of primary should be same and make sure on the Primary server the db is not locked for other activity.

Change liveupdate and replication settings, then try it

Please update the status,

Cheers!!

provide IP address of the replication partner instaed of hostname ( if it is been entered ) for replication configuration!

the IP is correct because in the primary server will appear the new site replication partners. I use the ip for replication partner , not hostname.  I can see a error of "the system cannot find the path specified" in the primary server(see attachment)

pass on the latest logs

log attached

Attachment(s)

scm-server-0_36.txt   27 KB 1 version

it seems to be still a network issue, open a case with Symantec and also try running network traffic tool to capture traffic to see where it fails.

Make sure that the server is running and your session has not timed out.
If you can reach the server but cannot log on, make sure that you provided the correct parameters.
If you are experiencing network issues, contact your system administrator. ErrorCode: 0x80020000
 at com.sygate.scm.common.communicate.Communicator.sendRequest(Communicator.java:319)
 at com.sygate.scm.server.replication.RemotePartnerCommunicator.login(RemotePartnerCommunicator.java:108)
 at com.sygate.scm.server.replication.RemotePartner.login(RemotePartner.java:94)
 at com.sygate.scm.server.replication.ReplicationTask.initialize(ReplicationTask.java:726)
 at com.sygate.scm.server.replication.ReplicationTask.replicate(ReplicationTask.java:321)
 at com.sygate.scm.server.replication.ReplicationTask.run(ReplicationTask.java:280)
 at java.util.TimerThread.mainLoop(Timer.java:512)
 at java.util.TimerThread.run(Timer.java:462)
2011-12-13 10:34:28.067 SEVERE: Unknown Exception
java.io.IOException: The system cannot find the path specified
 at java.io.WinNTFileSystem.createFileExclusively(Native Method)
 at java.io.File.createNewFile(File.java:883)
 at com.sygate.scm.server.consolemanager.requesthandler.ReplicationDataAggregator.createCSVFile(GetChangedMetadataHandler.java:1637)
 at com.sygate.scm.server.consolemanager.requesthandler.ReplicationDataAggregator.createCSVFile(GetChangedMetadataHandler.java:1607)
 at com.sygate.scm.server.consolemanager.requesthandler.ReplicationDataAggregator.createTableDataFiles(GetChangedMetadataHandler.java:1545)
 at com.sygate.scm.server.consolemanager.requesthandler.ReplicationDataAggregator.aggregateDataOnce(GetChangedMetadataHandler.java:1282)
 at com.sygate.scm.server.consolemanager.requesthandler.ReplicationDataAggregator.aggregateDataEx(GetChangedMetadataHandler.java:1094)
 at com.sygate.scm.server.consolemanager.requesthandler.ReplicationDataAggregator.aggregateData(GetChangedMetadataHandler.java:1030)
 at com.sygate.scm.server.consolemanager.requesthandler.GetChangedMetadataHandler.handleRequestEx(GetChangedMetadataHandler.java:350)
 at com.sygate.scm.server.consolemanager.requesthandler.GetChangedMetadataHandler.handleRequest(GetChangedMetadataHandler.java:99)
 at com.sygate.scm.server.consolemanager.RequestHandler.handleRequest(RequestHandler.java:266)
 at com.sygate.scm.server.consolemanager.RequestHandler.<init>(RequestHandler.java:80)
 at com.sygate.scm.server.servlet.ConsoleServlet.doPost(ConsoleServlet.java:79)
 at com.sygate.scm.server.servlet.ConsoleServlet.doGet(ConsoleServlet.java:50)

Hello,

I have try to reinstall the primary server, it seem to be work for the replication as follow. it seem not the network problem. now the firewall can also see many traffic. however, what problem will affect my primary server but not affect for new installation. thanks

any update for why the old primary server cannot be replicated. pls advise solution

i would suggest you to open a ticket with Symantec support.