Hi All,

Most of my client computers are reporting an Offline Status, though they are updated and not infected. I understand that this could mean that, The SEP client installed is corrupt and I need to replace a sylink file.

Does it also mean that , The client computers are switched off ,meaning that the computers are turned off.

I'm managing SEP globally and most of the time I'm viewing clients from the console.

From the console they are in computer mode and there's no green dot. From the Monitors logs the status is Offline.

Thank you

 

 

Hi,

There is many Reason.

1) Client are not connected in Network.

2) Sep client are Corrupted.

3) Duplicate SEP client.

4) Not communicate SEPM server.

You can check are really sep client are offline or other reason

 

Troubleshooting Client Communication with SEPM

Article:TECH95789

|

Created: 2009-01-26

|

Updated: 2012-01-03

|

Article URL http://www.symantec.com/docs/TECH95789

 

Symantec Endpoint Protection: Troubleshooting Client/Server Connectivity

Article:TECH105894

|

Created: 2008-01-12

|

Updated: 2012-10-04

|

Article URL http://www.symantec.com/docs/TECH105894

 

check this article for client srever troubleshooting http://www.symantec.com/docs/TECH160964 pass on the sylink log, if you need help in reviewing.

If the Client status shows that its Offline, means that particular client is not reporting to the client. There may be several reasons for the same. Most probably communication issue.

The "Offline" status merely means that the SEPM has not heard from the client within its configured heartbeat interval.  The reasons behind it are numerous (as earlier posts have indicated) and could range from a simple network blip, to the client having been vapourised in an alien attack (maybe a little unlikely ), and everything in between (for example: client is off, client is disconnected from the network, a firewall is blocking comms, client is trying to connect to SEPM via a proxy, client cannot resolve SEPM name, etc, etc, etc).

The "Offline" status is only really cause for concern if you think those client should be online.  In which case, it's time to get a hold of one of those clients and do some investigation (Ashish's links should help here, and "Thumbs Up").

It means the SEP client is not reporting to the SEPM for one reason or another. The PC could be turned off and missed the heartbeat check in or something could be wrong with the client.

Hi,

Go through this article.

Description of the different shield icon statuses in the System Tray for Symantec Endpoint Protection.

http://www.symantec.com/docs/HOWTO55020

http://www.symantec.com/docs/HOWTO55455

There are many reason for the same. 1. Systems are in unmanage condition. Ans https://www-secure.symantec.com/connect/downloads/solution-doc-manage-unmanaged-system-sep-1106005 https://www-secure.symantec.com/connect/downloads/sylink-replacer 2. Port is not open for the same systems Vlan. Ans Open the port 8014 from firewall (http://management_server_address:8014/secars/secars.dll?hello,secars) Answer Come Ok then port is opened 3. System is power Off Ans Align someone to switch on the system 4. System is in Sleep Mode. Ans Wak On Ln Utility 5. Proxy Setting issue Ans https://www-secure.symantec.com/connect/forums/server-status-set-offline-client https://www-secure.symantec.com/connect/forums/offline-1

Have you read and try the attach comments?

What is the current status of your issue?

Thank you everyone for all you assistance