Endpoint Protection

 View Only
Expand all | Collapse all

Client is up to date and commincated to SEPM, but SEPM report says out of date

  • 1.  Client is up to date and commincated to SEPM, but SEPM report says out of date

    Posted Apr 25, 2014 05:49 AM

    Some Cliens are up to date and commincating to SEPM, but SEPM report says out of date.

    SEPM version is 11.0.5

    SEP client is 11.0.3

    Please help here

     



  • 2.  RE: Client is up to date and commincated to SEPM, but SEPM report says out of date

    Posted Apr 25, 2014 06:08 AM

    try to delete one or two Problematic client in SEPm console and check after next heart beat setting

    Please check if you have a lot of .DAT/.TMP/.ERR files into SEPM\data\inbox subfolders (especially Agentinfo). If yes, it means clients are reporting their logs to the SEPM, but the manager is not able to process them.

    Clients cannot send data back to Symantec Endpoint Protection Manager

    Article:TECH105348  | Created: 2008-01-09  | Updated: 2009-01-30  | Article URL http://www.symantec.com/docs/TECH105348


  • 3.  RE: Client is up to date and commincated to SEPM, but SEPM report says out of date

    Posted Apr 25, 2014 06:17 AM

    Yes, .DAT/.TMP/.ERR files into SEPM\data\inbox subfolders (especially Agentinfo) are present.

    And have full write access to the folder mentioned in the document and have 10 GB free space still. we have only 600 system in this SEPM, out of this 200 are showing out of date, checked some clients, those are up date there, but sepm reports is showing 2013 date defintion and but old date

     

    Please let me know if have any atticle to fix.

     



  • 4.  RE: Client is up to date and commincated to SEPM, but SEPM report says out of date

    Posted Apr 25, 2014 06:23 AM

    Does any duplicate entry available in SEPM console ?

     

    Also try this

    Fixed so that LiveUpdate restarts after the client computer recovers from standby.

    2)1. Browse to \Program Files\Symantec\Symantec Endpoint Protection Manager\data\outbox\agentinfo

    2. Look for any .err files or tmp files & Dat files

    3. If you find anything which is not processed by sepm then it might be the reason for the client data loss

    4. Stop SEPM services from services.msc

    5. Delete all the files inside the location \Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\agentinfo

    6. Restart the SEPM services



  • 5.  RE: Client is up to date and commincated to SEPM, but SEPM report says out of date

    Posted Apr 25, 2014 06:59 AM

    2 post for same issue? 

    https://www-secure.symantec.com/connect/forums/sepm-reports-are-not-correct

     



  • 6.  RE: Client is up to date and commincated to SEPM, but SEPM report says out of date

    Posted Apr 25, 2014 07:03 AM

    Yes I have deleted all files inside the location \Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\agentinfo.

    and restarted services.

    And deleted probmatic client, it ic communicated but now shwoing with no defintion date.



  • 7.  RE: Client is up to date and commincated to SEPM, but SEPM report says out of date

    Posted Apr 25, 2014 07:28 AM

    You can wait some time .

    Does any duplicate entry available in SEPM console ?



  • 8.  RE: Client is up to date and commincated to SEPM, but SEPM report says out of date

    Posted Apr 25, 2014 07:37 AM

    No duplicate entry present,

    When I see in the log, below was observed, is there any issue.

    04/25 12:09:12 [29784:26652] post log--Write log to file error!10005



  • 9.  RE: Client is up to date and commincated to SEPM, but SEPM report says out of date

    Posted Apr 25, 2014 07:47 AM

    Not related for current problem..

    Does all sep client are showing online ?



  • 10.  RE: Client is up to date and commincated to SEPM, but SEPM report says out of date

    Posted Apr 25, 2014 08:00 AM

    SEP clients are online, but the one which I have deleted to check that is still showing no defintion and client not reporting status.

    After deleting logs from agentinfo, I can see there are one or two file comming. is this fine.



  • 11.  RE: Client is up to date and commincated to SEPM, but SEPM report says out of date

    Posted Apr 25, 2014 08:05 AM

    are these .err files? Can you post Sylink.log ?

    http://www.symantec.com/business/support/index?page=content&id=TECH104758



  • 12.  RE: Client is up to date and commincated to SEPM, but SEPM report says out of date

    Posted Apr 25, 2014 08:06 AM

    Does NTP/PTP defination showing out of date ?Yesterdy symantec has release NTP and PTP defination.

    http://www.symantec.com/security_response/definitions.jsp?pid=sep11_32



  • 13.  RE: Client is up to date and commincated to SEPM, but SEPM report says out of date

    Posted Apr 25, 2014 08:26 AM

    No, virus defintion is out of date. after deleting that client now that showing with no defintion. this I am facing for more systems.



  • 14.  RE: Client is up to date and commincated to SEPM, but SEPM report says out of date

    Posted Apr 25, 2014 08:31 AM

    Is it connected to the SEPM, force it to check in by right clicking icon and updating policy...



  • 15.  RE: Client is up to date and commincated to SEPM, but SEPM report says out of date

    Posted Apr 25, 2014 08:32 AM

    See that thread

    The SEPM shows client virus definition as "Not available"

    https://www-secure.symantec.com/connect/forums/sepm-shows-client-virus-definition-not-available#comment-9639481