Endpoint Protection

 View Only
Expand all | Collapse all

Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

Migration User

Migration UserOct 19, 2009 02:15 AM

Migration User

Migration UserOct 20, 2009 12:31 AM

Migration User

Migration UserNov 02, 2009 11:46 PM

  • 1.  Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Oct 16, 2009 07:55 AM
    I deploy Symantec Endpoint Protection Client in Window XP Machine.I cannot see green dot icon after installation is finish.so i try with SylinkDrop to that client .But the green dot won't appear into the Symantec Endpoint Protection Client.My Symantec Endpoint Protection Manager is Window XP too.http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008091215040048 I try that solution.I can telnet the Symantec Endpoint Manager,I can ping the SEPM,I can Access all the Symantec Web Page.I trun off the firewall 2 of these machine.How should i do to fix that problem? 


  • 2.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Oct 16, 2009 07:59 AM
    How many clients do you have? is it more than 10 ?

    Have u turned off firewall on both ends?
    Do a secars test and let us know what HTTP code do you see or do you see a OK

    Testing Communication from an Endpoint Protection client to the Endpoint Protection Manage

    http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/a6b9dc2d869c89a58825737700642895?OpenDocument 


  • 3.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Oct 16, 2009 08:06 AM
    For the communication to happen you need to telnet port of your IIS

    Have you installed SEPM on port 80 / 8014

    You need to disable the windows firewall on both the machines.

    Other than this , there should not be any problem in communication.



  • 4.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Oct 18, 2009 09:32 PM
    I installed SEPM on port 80.I disable the firewall on both of the machine.How to test secars test? Vikram Kumar page is won't work.


  • 5.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Oct 18, 2009 11:34 PM

    Browse to the following website in I.E

    http://<serveripaddres>/secars/secars.dll?hello,secars

    If it says OK then your client-server communication is reported to be working fine.

    You should also grab the sylinkmonitor utility to check on communications issues.
    Just search the Knowledge base for it.

    cheers

    Z
     



  • 6.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Oct 19, 2009 01:28 AM
    I test your solution zer0. It status is OK.But the green dot icon is not appear and the connection status is Offline.


  • 7.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Oct 19, 2009 02:15 AM
    Can you paste the Sylinkmonitor log here?


  • 8.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Oct 19, 2009 02:38 AM
    Increase the Connection limit of Windows Xp. Bydefault it is 10 and can be increase to 254.

    Visit the link mentioned below:
    http://www.dslreports.com/faq/10253

    Ajit 


  • 9.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Oct 19, 2009 03:23 AM
    I test  my symantec endpoint protection manager with symantec support tool.It won't show any error in IIS.


  • 10.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Oct 20, 2009 12:31 AM
    Is there anybody have solution?


  • 11.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Oct 20, 2009 01:19 AM
    Hello
    didn't you install unmanaged client, did you?
    and one more thing please. how you ping the sep manager from client? ping ip address or computer name?
    maybe client cannot resolve the computer name. can you check it with nslookup?
    Thanks


  • 12.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Oct 20, 2009 01:22 AM
    Where you tried to reinstall the client package....If no Try that ...


  • 13.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Oct 20, 2009 10:40 PM
    I didn't install unmanaged client.I make installation package from symantec endpoint protection manager. after that i copy it into the stick and install it into the client machine.I can ping both ip address and computer name.I already checking with nslookup.


  • 14.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Oct 20, 2009 10:41 PM
    I reinstall SEP for 3 time.It doesn't make any change.


  • 15.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Oct 21, 2009 12:46 AM
    Have you run the sylinkmonitor tool?
    Can you please paste the log files in here if it doesn't make any sense to you.

    Z



  • 16.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Oct 21, 2009 03:15 AM
    Hi,

    Stop the smc service on the cllient from Run ie,go to Start\Run & type smc -stop.
    Export the sylink.xml file from the Endpoint Protection Manager & paste it on the client in the following path C:\Program files\Symantec.Then restart the service manually.Wait for sometime (10-15 mins) and the client will display the green dot on the SEP icon.




  • 17.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Nov 02, 2009 10:10 PM
    read error, exit
    11/02 19:01:58 [3056] <ParseErrorCode:>12029=>The attempt to connect to the server failed.
    11/02 19:01:58 [3056] <SendRegistrationRequest:>SMS return=0
    11/02 19:01:58 [3056] <ParseHTTPStatusCode:>0=>Uninterpreted Status
    11/02 19:01:58 [3056] <SendRegistrationRequest:>ERR to query content length
    11/02 19:01:58 [3056] <SendRegistrationRequest:>Content Lenght =>
    11/02 19:01:58 [3056] HTTP returns status code=0
    11/02 19:01:58 [3056] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
    11/02 19:01:58 [3056] <SendRegistrationRequest:>COMPLETED, returned 5
    11/02 19:01:58 [3056] HEARTBEAT: Check Point 5.1
    11/02 19:01:58 [3056] <ScheduleNextUpdate>new scheduled heartbeat=32 seconds
    11/02 19:01:58 [3056] HEARTBEAT: Check Point 8
    11/02 19:01:58 [3056] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    11/02 19:01:58 [3056] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    11/02 19:01:58 [3056] <RegHeartbeatProc>====== Registration Procedure stops at 19:01:58 ======
    11/02 19:01:58 [3056] HEARTBEAT: Check Point 10
    11/02 19:01:59 [3056] HEARTBEAT: Check Point Complete
    11/02 19:01:59 [3056] <RegHeartbeatProc>Done, Heartbeat=32seconds
    11/02 19:01:59 [3056] HeartbeatProcFailed to get profile with proxy setting 1
    11/02 19:01:59 [3056] <CheckHeartbeatTimer>====== Heartbeat loop stops at 19:01:59 ======
    11/02 19:02:14 [3216] <CSyLink::mfn_DownloadNow()>
    11/02 19:02:14 [3216] </CSyLink::mfn_DownloadNow()>
    11/02 19:02:32 [3056] <CheckHeartbeatTimer>====== Heartbeat loop starts at 19:02:32 ======
    11/02 19:02:32 [3056] <GetOnlineNicInfo>:Netport Count=1
    11/02 19:02:32 [3056] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.xx.xx" Mac="00-1b-98-b1-91-7a" Gateway="192.168.xx.xx" SubnetMask="0.0.0.0"/></SSANICs>
    11/02 19:02:32 [3056] <CalcAgentHashKey>:CH=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
    11/02 19:02:32 [3056] <CalcAgentHashKey>:CHKey=84ACE5ACDB5E7B49450A761225AE17C3
    11/02 19:02:32 [3056] <CalcAgentHashKey>:C=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.org
    11/02 19:02:32 [3056] <CalcAgentHashKey>:CKey=ACCB3D87332BCFE53EBCF21A23E55705
    11/02 19:02:32 [3056] <CalcAgentHashKey>:UCH=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
    11/02 19:02:32 [3056] <CalcAgentHashKey>:UCHKey=F071AC26371DB61904DBF7555664EA07
    11/02 19:02:32 [3056] <CalcAgentHashKey>:UC=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.org
    11/02 19:02:32 [3056] <CalcAgentHashKey>:UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
    11/02 19:02:32 [3056] <DoHeartbeat>HardwareID=AF4876A83ACC58C5C2C804C0B910BF9E
    11/02 19:02:32 [3056] <DoHeartbeat>CHKey=84ACE5ACDB5E7B49450A761225AE17C3
    11/02 19:02:32 [3056] <DoHeartbeat>CKey=ACCB3D87332BCFE53EBCF21A23E55705
    11/02 19:02:32 [3056] <DoHeartbeat>UCHKey=F071AC26371DB61904DBF7555664EA07
    11/02 19:02:32 [3056] <DoHeartbeat>UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
    11/02 19:02:32 [3056] <DoHeartbeat> Set heartbeat event
    11/02 19:02:32 [3056] Use new configuration
    11/02 19:02:32 [3056] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 19:02:32 ======
    11/02 19:02:33 [3056] HEARTBEAT: Check Point 1
    11/02 19:02:33 [3056] <GetFirstSEMServer> Selecting a random server
    11/02 19:02:33 [3056] <GetFirstServer> Using server 'server.sophies.org'
    11/02 19:02:33 [3056] HEARTBEAT: Check Point 2
    11/02 19:02:33 [3056] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    11/02 19:02:33 [3056] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    11/02 19:02:33 [3056] HEARTBEAT: Check Point 3
    11/02 19:02:33 [3056] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
    11/02 19:02:33 [3056] HEARTBEAT: Check Point 4
    11/02 19:02:33 [3056] <RegHeartbeatProc>===Registration STAGE===
    11/02 19:02:33 [3056] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator


  • 18.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Nov 02, 2009 10:39 PM
    read error, exit
    11/02 19:01:58 [3056] <ParseErrorCode:>12029=>The attempt to connect to the server failed.
    11/02 19:01:58 [3056] <SendRegistrationRequest:>SMS return=0
    11/02 19:01:58 [3056] <ParseHTTPStatusCode:>0=>Uninterpreted Status
    11/02 19:01:58 [3056] <SendRegistrationRequest:>ERR to query content length
    11/02 19:01:58 [3056] <SendRegistrationRequest:>Content Lenght =>
    11/02 19:01:58 [3056] HTTP returns status code=0
    11/02 19:01:58 [3056] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
    11/02 19:01:58 [3056] <SendRegistrationRequest:>COMPLETED, returned 5
    11/02 19:01:58 [3056] HEARTBEAT: Check Point 5.1
    11/02 19:01:58 [3056] <ScheduleNextUpdate>new scheduled heartbeat=32 seconds
    11/02 19:01:58 [3056] HEARTBEAT: Check Point 8
    11/02 19:01:58 [3056] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    11/02 19:01:58 [3056] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    11/02 19:01:58 [3056] <RegHeartbeatProc>====== Registration Procedure stops at 19:01:58 ======
    11/02 19:01:58 [3056] HEARTBEAT: Check Point 10
    11/02 19:01:59 [3056] HEARTBEAT: Check Point Complete
    11/02 19:01:59 [3056] <RegHeartbeatProc>Done, Heartbeat=32seconds
    11/02 19:01:59 [3056] HeartbeatProcFailed to get profile with proxy setting 1
    11/02 19:01:59 [3056] <CheckHeartbeatTimer>====== Heartbeat loop stops at 19:01:59 ======
    11/02 19:02:14 [3216] <CSyLink::mfn_DownloadNow()>
    11/02 19:02:14 [3216] </CSyLink::mfn_DownloadNow()>
    11/02 19:02:32 [3056] <CheckHeartbeatTimer>====== Heartbeat loop starts at 19:02:32 ======
    11/02 19:02:32 [3056] <GetOnlineNicInfo>:Netport Count=1
    11/02 19:02:32 [3056] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.xx.xx" Mac="00-1b-98-b1-91-7a" Gateway="192.168.xx.xx" SubnetMask="0.0.0.0"/></SSANICs>
    11/02 19:02:32 [3056] <CalcAgentHashKey>:CH=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
    11/02 19:02:32 [3056] <CalcAgentHashKey>:CHKey=84ACE5ACDB5E7B49450A761225AE17C3
    11/02 19:02:32 [3056] <CalcAgentHashKey>:C=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.org
    11/02 19:02:32 [3056] <CalcAgentHashKey>:CKey=ACCB3D87332BCFE53EBCF21A23E55705
    11/02 19:02:32 [3056] <CalcAgentHashKey>:UCH=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
    11/02 19:02:32 [3056] <CalcAgentHashKey>:UCHKey=F071AC26371DB61904DBF7555664EA07
    11/02 19:02:32 [3056] <CalcAgentHashKey>:UC=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.org
    11/02 19:02:32 [3056] <CalcAgentHashKey>:UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
    11/02 19:02:32 [3056] <DoHeartbeat>HardwareID=AF4876A83ACC58C5C2C804C0B910BF9E
    11/02 19:02:32 [3056] <DoHeartbeat>CHKey=84ACE5ACDB5E7B49450A761225AE17C3
    11/02 19:02:32 [3056] <DoHeartbeat>CKey=ACCB3D87332BCFE53EBCF21A23E55705
    11/02 19:02:32 [3056] <DoHeartbeat>UCHKey=F071AC26371DB61904DBF7555664EA07
    11/02 19:02:32 [3056] <DoHeartbeat>UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
    11/02 19:02:32 [3056] <DoHeartbeat> Set heartbeat event
    11/02 19:02:32 [3056] Use new configuration
    11/02 19:02:32 [3056] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 19:02:32 ======
    11/02 19:02:33 [3056] HEARTBEAT: Check Point 1
    11/02 19:02:33 [3056] <GetFirstSEMServer> Selecting a random server
    11/02 19:02:33 [3056] <GetFirstServer> Using server 'server.sophies.org'
    11/02 19:02:33 [3056] HEARTBEAT: Check Point 2
    11/02 19:02:33 [3056] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    11/02 19:02:33 [3056] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    11/02 19:02:33 [3056] HEARTBEAT: Check Point 3
    11/02 19:02:33 [3056] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
    11/02 19:02:33 [3056] HEARTBEAT: Check Point 4
    11/02 19:02:33 [3056] <RegHeartbeatProc>===Registration STAGE===
    11/02 19:02:33 [3056] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator


  • 19.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Nov 02, 2009 11:46 PM
    Is there anybody know how to fix this issue?


  • 20.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Nov 02, 2009 11:53 PM
    can you check if its resolving the name of your parent server

    'server.sophies.org'

    check your dns settings


  • 21.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Nov 03, 2009 12:11 AM
    I can resolve the name.I can ping to that client and web access to that symantec endpoint manager console.I try with sylinkdrop too.But the green dot icon is not display in symantec endpoint protection client and symantec endpoint protection manager console.


  • 22.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Nov 03, 2009 12:19 AM
    Try:
    Click Start > Run, type Regedit, and then click OK.
    Go to the following key:
    HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\InternetSettings
    In the right pane, double-click GlobalUserOffline, then change the value to 0.
     


  • 23.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Nov 03, 2009 12:27 AM

    Try to change the communications settings from push mode to pull mode for the group



  • 24.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Nov 03, 2009 01:35 AM
    I haven't seen any golbal user offline setting into the internet settings.My Symantec Endpoint Protection Manager is window xp and the problem machine is window xp too.Here is the sylink log files of problem machine.I already change push mode to pull mode for the group.

    read error, exit
    11/02 19:01:58 [3056] <ParseErrorCode:>12029=>The attempt to connect to the server failed.
    11/02 19:01:58 [3056] <SendRegistrationRequest:>SMS return=0
    11/02 19:01:58 [3056] <ParseHTTPStatusCode:>0=>Uninterpreted Status
    11/02 19:01:58 [3056] <SendRegistrationRequest:>ERR to query content length
    11/02 19:01:58 [3056] <SendRegistrationRequest:>Content Lenght =>
    11/02 19:01:58 [3056] HTTP returns status code=0
    11/02 19:01:58 [3056] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
    11/02 19:01:58 [3056] <SendRegistrationRequest:>COMPLETED, returned 5
    11/02 19:01:58 [3056] HEARTBEAT: Check Point 5.1
    11/02 19:01:58 [3056] <ScheduleNextUpdate>new scheduled heartbeat=32 seconds
    11/02 19:01:58 [3056] HEARTBEAT: Check Point 8
    11/02 19:01:58 [3056] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    11/02 19:01:58 [3056] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    11/02 19:01:58 [3056] <RegHeartbeatProc>====== Registration Procedure stops at 19:01:58 ======
    11/02 19:01:58 [3056] HEARTBEAT: Check Point 10
    11/02 19:01:59 [3056] HEARTBEAT: Check Point Complete
    11/02 19:01:59 [3056] <RegHeartbeatProc>Done, Heartbeat=32seconds
    11/02 19:01:59 [3056] HeartbeatProcFailed to get profile with proxy setting 1
    11/02 19:01:59 [3056] <CheckHeartbeatTimer>====== Heartbeat loop stops at 19:01:59 ======
    11/02 19:02:14 [3216] <CSyLink::mfn_DownloadNow()>
    11/02 19:02:14 [3216] </CSyLink::mfn_DownloadNow()>
    11/02 19:02:32 [3056] <CheckHeartbeatTimer>====== Heartbeat loop starts at 19:02:32 ======
    11/02 19:02:32 [3056] <GetOnlineNicInfo>:Netport Count=1
    11/02 19:02:32 [3056] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.xx.xx" Mac="00-1b-98-b1-91-7a" Gateway="192.168.xx.xx" SubnetMask="0.0.0.0"/></SSANICs>
    11/02 19:02:32 [3056] <CalcAgentHashKey>:CH=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
    11/02 19:02:32 [3056] <CalcAgentHashKey>:CHKey=84ACE5ACDB5E7B49450A761225AE17C3
    11/02 19:02:32 [3056] <CalcAgentHashKey>:C=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.org
    11/02 19:02:32 [3056] <CalcAgentHashKey>:CKey=ACCB3D87332BCFE53EBCF21A23E55705
    11/02 19:02:32 [3056] <CalcAgentHashKey>:UCH=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
    11/02 19:02:32 [3056] <CalcAgentHashKey>:UCHKey=F071AC26371DB61904DBF7555664EA07
    11/02 19:02:32 [3056] <CalcAgentHashKey>:UC=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.org
    11/02 19:02:32 [3056] <CalcAgentHashKey>:UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
    11/02 19:02:32 [3056] <DoHeartbeat>HardwareID=AF4876A83ACC58C5C2C804C0B910BF9E
    11/02 19:02:32 [3056] <DoHeartbeat>CHKey=84ACE5ACDB5E7B49450A761225AE17C3
    11/02 19:02:32 [3056] <DoHeartbeat>CKey=ACCB3D87332BCFE53EBCF21A23E55705
    11/02 19:02:32 [3056] <DoHeartbeat>UCHKey=F071AC26371DB61904DBF7555664EA07
    11/02 19:02:32 [3056] <DoHeartbeat>UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
    11/02 19:02:32 [3056] <DoHeartbeat> Set heartbeat event
    11/02 19:02:32 [3056] Use new configuration
    11/02 19:02:32 [3056] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 19:02:32 ======
    11/02 19:02:33 [3056] HEARTBEAT: Check Point 1
    11/02 19:02:33 [3056] <GetFirstSEMServer> Selecting a random server
    11/02 19:02:33 [3056] <GetFirstServer> Using server 'server.sophies.org'
    11/02 19:02:33 [3056] HEARTBEAT: Check Point 2
    11/02 19:02:33 [3056] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    11/02 19:02:33 [3056] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    11/02 19:02:33 [3056] HEARTBEAT: Check Point 3
    11/02 19:02:33 [3056] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
    11/02 19:02:33 [3056] HEARTBEAT: Check Point 4
    11/02 19:02:33 [3056] <RegHeartbeatProc>===Registration STAGE===
    11/02 19:02:33 [3056] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator


  • 25.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Nov 03, 2009 01:55 AM

    Windows XP have the limitation of concurrent TCP connections .It can handle only 10 concurrent connections at a time. So make all your pcs to pull mode (push mode will keep a connection always open with its clients) make the heartbeat inter well to 1 hour and randomize it to 5 min and try...

     


  • 26.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Nov 03, 2009 12:14 PM
    Also try to do a iisreset on the machine which has the SEPM
    Then Right click on the client which has issues and click on Update policy
    Also check the proxy on IE try to disable it and check if present


  • 27.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Nov 03, 2009 04:00 PM
    The SylinkLog you posted does not show what the client is trying to connect to. Could you add that part?


  • 28.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Nov 03, 2009 10:06 PM
    11/02 19:01:37 [3056] <ParseErrorCode:>12029=>The attempt to connect to the server failed.
    11/02 19:01:37 [3056] <SendRegistrationRequest:>SMS return=0
    11/02 19:01:37 [3056] <ParseHTTPStatusCode:>0=>Uninterpreted Status
    11/02 19:01:37 [3056] <SendRegistrationRequest:>ERR to query content length
    11/02 19:01:37 [3056] <SendRegistrationRequest:>Content Lenght =>
    11/02 19:01:37 [3056] HTTP returns status code=0
    11/02 19:01:37 [3056] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
    11/02 19:01:37 [3056] <SendRegistrationRequest:>COMPLETED, returned 5
    11/02 19:01:37 [3056] HEARTBEAT: Check Point 5.1
    11/02 19:01:37 [3056] <RegHeartbeatProc>switch to another server
    11/02 19:01:37 [3056] HEARTBEAT: Check Point 9
    11/02 19:01:37 [3056] HEARTBEAT: Check Point 8
    11/02 19:01:37 [3056] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    11/02 19:01:37 [3056] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    11/02 19:01:37 [3056] HEARTBEAT: Check Point 1
    11/02 19:01:37 [3056] HEARTBEAT: Check Point 2
    11/02 19:01:37 [3056] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    11/02 19:01:37 [3056] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    11/02 19:01:37 [3056] HEARTBEAT: Check Point 3
    11/02 19:01:37 [3056] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
    11/02 19:01:37 [3056] HEARTBEAT: Check Point 4
    11/02 19:01:37 [3056] <RegHeartbeatProc>===Registration STAGE===
    11/02 19:01:37 [3056] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator

    read error, exit
    11/02 19:01:58 [3056] <ParseErrorCode:>12029=>The attempt to connect to the server failed.
    11/02 19:01:58 [3056] <SendRegistrationRequest:>SMS return=0
    11/02 19:01:58 [3056] <ParseHTTPStatusCode:>0=>Uninterpreted Status
    11/02 19:01:58 [3056] <SendRegistrationRequest:>ERR to query content length
    11/02 19:01:58 [3056] <SendRegistrationRequest:>Content Lenght =>
    11/02 19:01:58 [3056] HTTP returns status code=0
    11/02 19:01:58 [3056] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
    11/02 19:01:58 [3056] <SendRegistrationRequest:>COMPLETED, returned 5
    11/02 19:01:58 [3056] HEARTBEAT: Check Point 5.1
    11/02 19:01:58 [3056] <ScheduleNextUpdate>new scheduled heartbeat=32 seconds
    11/02 19:01:58 [3056] HEARTBEAT: Check Point 8
    11/02 19:01:58 [3056] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    11/02 19:01:58 [3056] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    11/02 19:01:58 [3056] <RegHeartbeatProc>====== Registration Procedure stops at 19:01:58 ======
    11/02 19:01:58 [3056] HEARTBEAT: Check Point 10
    11/02 19:01:59 [3056] HEARTBEAT: Check Point Complete
    11/02 19:01:59 [3056] <RegHeartbeatProc>Done, Heartbeat=32seconds
    11/02 19:01:59 [3056] HeartbeatProcFailed to get profile with proxy setting 1
    11/02 19:01:59 [3056] <CheckHeartbeatTimer>====== Heartbeat loop stops at 19:01:59 ======
    11/02 19:02:14 [3216] <CSyLink::mfn_DownloadNow()>
    11/02 19:02:14 [3216] </CSyLink::mfn_DownloadNow()>
    11/02 19:02:32 [3056] <CheckHeartbeatTimer>====== Heartbeat loop starts at 19:02:32 ======
    11/02 19:02:32 [3056] <GetOnlineNicInfo>:Netport Count=1
    11/02 19:02:32 [3056] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.xx.xx" Mac="00-1e-92-b1-82-8a" Gateway="192.168.xx.xxx" SubnetMask="0.0.0.0"/></SSANICs>
    11/02 19:02:32 [3056] <CalcAgentHashKey>:CH=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
    11/02 19:02:32 [3056] <CalcAgentHashKey>:CHKey=84ACE5ACDB5E7B49450A761225AE17C3
    11/02 19:02:32 [3056] <CalcAgentHashKey>:C=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.org
    11/02 19:02:32 [3056] <CalcAgentHashKey>:CKey=ACCB3D87332BCFE53EBCF21A23E55705
    11/02 19:02:32 [3056] <CalcAgentHashKey>:UCH=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
    11/02 19:02:32 [3056] <CalcAgentHashKey>:UCHKey=F071AC26371DB61904DBF7555664EA07
    11/02 19:02:32 [3056] <CalcAgentHashKey>:UC=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.org
    11/02 19:02:32 [3056] <CalcAgentHashKey>:UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
    11/02 19:02:32 [3056] <DoHeartbeat>HardwareID=AF4876A83ACC58C5C2C804C0B910BF9E
    11/02 19:02:32 [3056] <DoHeartbeat>CHKey=84ACE5ACDB5E7B49450A761225AE17C3
    11/02 19:02:32 [3056] <DoHeartbeat>CKey=ACCB3D87332BCFE53EBCF21A23E55705
    11/02 19:02:32 [3056] <DoHeartbeat>UCHKey=F071AC26371DB61904DBF7555664EA07
    11/02 19:02:32 [3056] <DoHeartbeat>UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
    11/02 19:02:32 [3056] <DoHeartbeat> Set heartbeat event
    11/02 19:02:32 [3056] Use new configuration
    11/02 19:02:32 [3056] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 19:02:32 ======
    11/02 19:02:33 [3056] HEARTBEAT: Check Point 1
    11/02 19:02:33 [3056] <GetFirstSEMServer> Selecting a random server
    11/02 19:02:33 [3056] <GetFirstServer> Using server 'mimas.sophies.org'
    11/02 19:02:33 [3056] HEARTBEAT: Check Point 2
    11/02 19:02:33 [3056] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    11/02 19:02:33 [3056] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    11/02 19:02:33 [3056] HEARTBEAT: Check Point 3
    11/02 19:02:33 [3056] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
    11/02 19:02:33 [3056] HEARTBEAT: Check Point 4
    11/02 19:02:33 [3056] <RegHeartbeatProc>===Registration STAGE===
    11/02 19:02:33 [3056] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator

    read error, exit
    11/02 19:02:54 [3056] <ParseErrorCode:>12029=>The attempt to connect to the server failed.
    11/02 19:02:54 [3056] <SendRegistrationRequest:>SMS return=0
    11/02 19:02:54 [3056] <ParseHTTPStatusCode:>0=>Uninterpreted Status
    11/02 19:02:54 [3056] <SendRegistrationRequest:>ERR to query content length
    11/02 19:02:54 [3056] <SendRegistrationRequest:>Content Lenght =>
    11/02 19:02:54 [3056] HTTP returns status code=0
    11/02 19:02:54 [3056] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
    11/02 19:02:54 [3056] <SendRegistrationRequest:>COMPLETED, returned 5
    11/02 19:02:54 [3056] HEARTBEAT: Check Point 5.1
    11/02 19:02:54 [3056] <RegHeartbeatProc>switch to another server
    11/02 19:02:54 [3056] HEARTBEAT: Check Point 9
    11/02 19:02:54 [3056] HEARTBEAT: Check Point 8
    11/02 19:02:54 [3056] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    11/02 19:02:54 [3056] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    11/02 19:02:55 [3056] HEARTBEAT: Check Point 1
    11/02 19:02:55 [3056] HEARTBEAT: Check Point 2
    11/02 19:02:55 [3056] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    11/02 19:02:55 [3056] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    11/02 19:02:55 [3056] HEARTBEAT: Check Point 3
    11/02 19:02:55 [3056] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
    11/02 19:02:55 [3056] HEARTBEAT: Check Point 4
    11/02 19:02:55 [3056] <RegHeartbeatProc>===Registration STAGE===
    11/02 19:02:55 [3056] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator

    read error, exit
    11/02 19:03:14 [3216] <CSyLink::mfn_DownloadNow()>
    11/02 19:03:14 [3216] </CSyLink::mfn_DownloadNow()>
    11/02 19:03:16 [3056] <ParseErrorCode:>12029=>The attempt to connect to the server failed.
    11/02 19:03:16 [3056] <SendRegistrationRequest:>SMS return=0
    11/02 19:03:16 [3056] <ParseHTTPStatusCode:>0=>Uninterpreted Status
    11/02 19:03:16 [3056] <SendRegistrationRequest:>ERR to query content length
    11/02 19:03:16 [3056] <SendRegistrationRequest:>Content Lenght =>
    11/02 19:03:16 [3056] HTTP returns status code=0
    11/02 19:03:16 [3056] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
    11/02 19:03:16 [3056] <SendRegistrationRequest:>COMPLETED, returned 5
    11/02 19:03:16 [3056] HEARTBEAT: Check Point 5.1
    11/02 19:03:16 [3056] <ScheduleNextUpdate>new scheduled heartbeat=64 seconds
    11/02 19:03:16 [3056] HEARTBEAT: Check Point 8
    11/02 19:03:16 [3056] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    11/02 19:03:16 [3056] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    11/02 19:03:16 [3056] <RegHeartbeatProc>====== Registration Procedure stops at 19:03:16 ======
    11/02 19:03:16 [3056] HEARTBEAT: Check Point 10
    11/02 19:03:16 [3056] HEARTBEAT: Check Point Complete
    11/02 19:03:16 [3056] <RegHeartbeatProc>Done, Heartbeat=64seconds
    11/02 19:03:16 [3056] HeartbeatProcFailed to get profile with proxy setting 2
    11/02 19:03:16 [3056] <CheckHeartbeatTimer>====== Heartbeat loop stops at 19:03:16 ======
    11/02 19:04:14 [3216] <CSyLink::mfn_DownloadNow()>
    11/02 19:04:14 [3216] </CSyLink::mfn_DownloadNow()>
    11/02 19:04:21 [3056] <CheckHeartbeatTimer>====== Heartbeat loop starts at 19:04:21 ======
    11/02 19:04:22 [3056] <GetOnlineNicInfo>:Netport Count=1
    11/02 19:04:22 [3056] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.xx.xx" Mac="00-1e-92-b1-82-8a" Gateway="192.168.xx.xxx" SubnetMask="0.0.0.0"/></SSANICs>
    11/02 19:04:22 [3056] <CalcAgentHashKey>:CH=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
    11/02 19:04:22 [3056] <CalcAgentHashKey>:CHKey=84ACE5ACDB5E7B49450A761225AE17C3
    11/02 19:04:22 [3056] <CalcAgentHashKey>:C=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.org
    11/02 19:04:22 [3056] <CalcAgentHashKey>:CKey=ACCB3D87332BCFE53EBCF21A23E55705
    11/02 19:04:22 [3056] <CalcAgentHashKey>:UCH=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
    11/02 19:04:22 [3056] <CalcAgentHashKey>:UCHKey=F071AC26371DB61904DBF7555664EA07
    11/02 19:04:22 [3056] <CalcAgentHashKey>:UC=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.org
    11/02 19:04:22 [3056] <CalcAgentHashKey>:UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
    11/02 19:04:22 [3056] <DoHeartbeat>HardwareID=AF4876A83ACC58C5C2C804C0B910BF9E
    11/02 19:04:22 [3056] <DoHeartbeat>CHKey=84ACE5ACDB5E7B49450A761225AE17C3
    11/02 19:04:22 [3056] <DoHeartbeat>CKey=ACCB3D87332BCFE53EBCF21A23E55705
    11/02 19:04:22 [3056] <DoHeartbeat>UCHKey=F071AC26371DB61904DBF7555664EA07
    11/02 19:04:22 [3056] <DoHeartbeat>UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
    11/02 19:04:22 [3056] <DoHeartbeat> Set heartbeat event
    11/02 19:04:22 [3056] Use new configuration
    11/02 19:04:22 [3056] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 19:04:22 ======
    11/02 19:04:22 [3056] HEARTBEAT: Check Point 1
    11/02 19:04:22 [3056] <GetFirstSEMServer> Selecting a random server
    11/02 19:04:22 [3056] <GetFirstServer> Using server 'mimas.sophies.org'
    11/02 19:04:22 [3056] HEARTBEAT: Check Point 2
    11/02 19:04:22 [3056] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    11/02 19:04:22 [3056] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    11/02 19:04:22 [3056] HEARTBEAT: Check Point 3
    11/02 19:04:22 [3056] mfn_CreateInetSession: Session is NULL for 'no proxy' setting .. Communication id bound to FAIL..
    11/02 19:04:22 [3056] Throw Internet Exception, Error Code=0;AH: failed to open internet.
    11/02 19:04:22 [3056] CInternetException: <RegHeartbeatProc>: The operation completed successfully.

    11/02 19:04:22 [3056] <ScheduleNextUpdate>Manually assigned heartbeat=1 seconds
    11/02 19:04:22 [3056] <RegHeartbeatProc>====== Registration Procedure stops at 19:04:22 ======
    11/02 19:04:22 [3056] HEARTBEAT: Check Point 10
    11/02 19:04:23 [3056] HEARTBEAT: Check Point Complete
    11/02 19:04:23 [3056] <RegHeartbeatProc>Done, Heartbeat=1seconds
    11/02 19:04:23 [3056] HeartbeatProcFailed to get profile with proxy setting 3
    11/02 19:04:23 [3056] <CheckHeartbeatTimer>====== Heartbeat loop stops at 19:04:23 ======
    11/02 19:04:25 [3056] <CheckHeartbeatTimer>====== Heartbeat loop starts at 19:04:25 ======
    11/02 19:04:25 [3056] <GetOnlineNicInfo>:Netport Count=1
    11/02 19:04:25 [3056] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.xx.xx" Mac="00-1e-92-b1-82-8a" Gateway="192.168.xx.xxx" SubnetMask="0.0.0.0"/></SSANICs>
    11/02 19:04:25 [3056] <CalcAgentHashKey>:CH=B5664FC0C0A8592100B2E9BE24F6F4C41poolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
    11/02 19:04:25 [3056] <CalcAgentHashKey>:CHKey=84ACE5ACDB5E7B49450A761225AE17C3
    11/02 19:04:25 [3056] <CalcAgentHashKey>:C=B5664FC0C0A8592100B2E9BE24F6F4C41Poolsophies.org
    11/02 19:04:25 [3056] <CalcAgentHashKey>:CKey=ACCB3D87332BCFE53EBCF21A23E55705
    11/02 19:04:25 [3056] <CalcAgentHashKey>:UCH=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.orgAF4876A83ACC58C5C2C804C0B910BF9E
    11/02 19:04:25 [3056] <CalcAgentHashKey>:UCHKey=F071AC26371DB61904DBF7555664EA07
    11/02 19:04:25 [3056] <CalcAgentHashKey>:UC=B5664FC0C0A8592100B2E9BE24F6F4C40AdministratorLocalComputerPoolsophies.org
    11/02 19:04:25 [3056] <CalcAgentHashKey>:UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
    11/02 19:04:25 [3056] <DoHeartbeat>HardwareID=AF4876A83ACC58C5C2C804C0B910BF9E
    11/02 19:04:25 [3056] <DoHeartbeat>CHKey=84ACE5ACDB5E7B49450A761225AE17C3
    11/02 19:04:25 [3056] <DoHeartbeat>CKey=ACCB3D87332BCFE53EBCF21A23E55705
    11/02 19:04:25 [3056] <DoHeartbeat>UCHKey=F071AC26371DB61904DBF7555664EA07
    11/02 19:04:25 [3056] <DoHeartbeat>UCKey=756EE705BFEFAEF4D61CDD2FE7D4F82A
    11/02 19:04:25 [3056] <DoHeartbeat> Set heartbeat event
    11/02 19:04:25 [3056] Use new configuration
    11/02 19:04:25 [3056] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 19:04:25 ======
    11/02 19:04:26 [3056] HEARTBEAT: Check Point 1
    11/02 19:04:26 [3056] <GetFirstSEMServer> Selecting a random server
    11/02 19:04:26 [3056] <GetFirstServer> Using server '192.168.xx.xx'
    11/02 19:04:26 [3056] HEARTBEAT: Check Point 2
    11/02 19:04:26 [3056] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    11/02 19:04:26 [3056] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    11/02 19:04:26 [3056] HEARTBEAT: Check Point 3
    11/02 19:04:26 [3056] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
    11/02 19:04:26 [3056] HEARTBEAT: Check Point 4
    11/02 19:04:26 [3056] <RegHeartbeatProc>===Registration STAGE===
    11/02 19:04:26 [3056] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator

    read error, exit

    Please help me if everybody have time.


  • 29.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Nov 04, 2009 01:47 AM

    Since you are using windows XP as server you are having a limitation in no. of concurrent TCP connections. For this you can do two things

    1. Make all your clients

    to pull mode (push mode will keep a connection always open with its clients)

    make the heartbeat inter well to 1 hour and randomize it to 5 min.

    2.Decrease the auto disconnect timeout using net config server /autodisconnect:time_before_autodisconnect command (Specify the time in minutes.)

    ref: http://support.microsoft.com/kb/314882 


  • 30.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Nov 04, 2009 07:01 PM
    The Sylink log shows you are not able to even open a connection. This could be caused Windows XP connection limitation.
    Try AravindKM's suggestions. If you have a lot of clients, you may want to move the SEPM to a machine with a Server OS.


  • 31.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager
    Best Answer

    Posted Nov 11, 2009 08:06 AM

    Have managed to sort my issue regarding clients not connecting to SEPM and showing a green dot on the Endpoint Shield.

    After trying to replace the Sylink file on local machines I tried to removing two registry keys on the local machine.

    Open regedt32,

    Browse to

    MyComputer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections and export the connections folder to a memorable location.

    This is incase there is an error after registry edit. I myself didn't backup the registry but obviously it is a good idea.

    Then browse to

    MyComputer\HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections and delete the following keys.

    DefaultConnectionSettings
    SavedLegacySettings

    Then reboot.



  • 32.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager



  • 33.  RE: Symantec Endpoint Protection Client Cannot Communicate With Symantec Endpoint Protection Manager

    Posted Nov 23, 2009 03:20 AM
    Hello All

    Thank you for who helping me.I am so happy to fix this problem.I try Brannel01 it really helpful.Thank you all.