Endpoint Protection

Hi,

   I observed that Endpoint count displayed on home tab is different from actual Endpoint count that I get counting clients in all groups. Can anybody please tell me the reason?

 

Thanks,

Tabish

Generally it is because clients can be counted in more than one group.

Check this KB article for the reason:

On the Symantec Endpoint Protection Manager (SEPM) Home Page, the Endpoint Status count adds up to more clients than exist in the environment

Article:TECH201770

|

Created: 2013-01-17

|

Updated: 2013-01-21

|

Article URL http://www.symantec.com/docs/TECH201770

 

In my case, client count displayed on home page is lesser than actual one.

 

HI,

Check this thread and aniket comments

https://www-secure.symantec.com/connect/forums/client-count-not-shown-correctly-sepms-home-page

Hello,

 

Please delete the all contents of the agentinfo folder in SEPM have.

Please follow the below given steps.

1. Stop the Symantec Endpoint Protection Manager service
   1. Click Start, then Run ==> type services.msc ==>ok ==>salect Symantec Endpoint Protection Manager and then right click on it and stop the services.

1. Open Windows Explorer and navigate to the following folder; back up all files residing in this folder before proceeding:

   \Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\agentinfo

2. After backing up the files, delete the contents of the folder so that the agentinfo folder is empty
3. Start the Symantec Endpoint Protection Manager service

 

Log into the Symantec Endpoint Protection Manager and check.

 

Hi Brian,

According to the above Article, total number of clients would show by adding up the first three items.

Clients Up to date
Cleints Out of date
Clients Offline

My Concern is:

What if a Client is Up to date but Offline, or else it is out of date but offline, in bith this case SEPM will count 2 ( 1 for up to date and 1 for Offline). If it happens, then naturally the total count will incerase then the actual existance.

Whats the actual difference on the amount of the clients you see?

 

home page displays last 12 hours information by default and maximum upto last 24 hours.

I did as suggested above. But still difference is existing.

Hello Tabish,

Please mark as a solution which thread helps you best, if your problem is resolved?

Tabish,

Is it possible that under the Clients tab you see some older clients that are no longer existing? - maybe these are not reported on the "Total Endpoints" view?

here is how you can clean it up:

http://www.symantec.com/business/support/index?page=content&id=TECH175865

http://www.symantec.com/business/support/index?page=content&id=TECH168121

...after changign the settings you can rebuiild the indexs on the db and truncate the logs.

Hi,

What's the SEPM version?

It's recommended to have SEPM and SEP clients on the same version.

There are some product fix in the latest SEP version SEP 12.1 RU2

Check SEP 12.1 RU2 fix notes.

If not using the latest SEP version please upgrade.

If using SQL database try to repair that as well along with SEPM repair.

In SEPM console go to Home-->Preference and check whether you have selected 12 hour data or 24 hour data to display in home page...