We are migrating from SPE 7.5.3 to 7.9 on 64bit RHEL 6.8.
I'm trying to run the backup command using migration utility and getting the below error.
./spemigrationutility -e "/opt/SYMCScan""/tmp/SP_Backup/"
./spemigrationutility: error while loading shared libraries: libcrypto.so.1.0.0: wrong ELF class: ELFCLASS32
Please help.
Hi,
It was reported that emails sent to some clients weren't delivered on time, sometimes with a delay of a day after it was sent.
I asked to support team of our mail server to check what could be happening and and was told that emails delivered to domains on messagelabs servers probably are being rejected.
When trying to telnet port 25 to cluster6.eu.messagelabs.com for exemple, sometimes there's no response, same as other servers from messagelabs.com.
There's no problem with IP using http://ipremoval.sms.symantec.com/.
Can you check with your servers if there's issues with our IP??
Thanks
Hello,
I need your assist from the folowing warning event in the enforce console:
| Message | |
|---|---|
| Code | 3901 |
| Summary | System events have been suppressed. |
| Detail | System event throttle limit exceeded. 1 events have been suppressed. Internal error code = communications_error. |
This warning reference to the endpoint server and I like to now the cause of this event.
Support 101 is designed to help you with the most common questions or issues when configuring and managing Email Security.cloud, or when troubleshooting spam and email delivery issues.
Topics for Email Security.cloud include:
Visit the Email Security.cloud support page for more support resources at https://support.symantec.com/en_US/email-security-cloud.html.
We value your opinion. If you have any feedback for improving the knowledge base, please let us know by replying directly to this thread.
You can also suggest improvements within individual knowledge base articles by clicking "Did this article resolve your issue?" Your feedback is then reviewed and acted upon by our support agents as part of a regular review process.
I've been getting security notifications from Norton telling me its prevented an intrusion attempt made by JSCoinminer Download 8. This security notification occurs only when I launch Firefox.
Intrusion Prevention Signature Auto Block Has Blocked IP: 198.54.115.220 for a period of 30 minutes.
Offending URL minitheatre.org. (198.54.115.220, 80)
I've been getting responses from Google telling me;
Our systems have detected unusual traffic from your computer network
I've done full system scans with Norton and I've also used Malwarebytes and adware cleaner. I've deleted minitheatre.org from bookmarks and search history. After all that, still I get these pop-up notification from Norton. This script is buried somewhere deep within Firefox.
How do I find it and get rid?
Hello,
We are using Symantec Endpoint Protection 12.1.x in our Lab. Few of our students using Psiphon application to get Internet in lab.
Is it possible to block Psiphon application using Symantec endpoint protection. If possible, please share the procedure.
Thanks in advance.
So, windows update repeatedly tried to install, restarted day after day, and finally came to blue screen that offered a few options, none of which worked. Microsoft had me reinstall windows and it honestly didn't occur to me that the drive was encrypted. So, reinstalled and lost data but also when I realized and downloaded Endpoint Encryption it asked me for password for my SSD. I entered it, but then windows bugged out and sent me back to boot screen multiple times and i have now reinstalled windows. three times ( now not downloading endpoint since it is crashing the computer). Now, lost data on SSD but that was minimal - have second drive, also encrypted with endpoint encryption, that has a lot of data I don't want to lose. Any ideas how to fix this mess? Thx.
Dear Team!
I have blocked MTP/PTP/USB storage using application & device control policy in SEPM 12.1.6 RU6. But if i goes with USB Tethring from android. and then access my system from file explorer, i am able to connect it and can take files also from the system in my android.
I checked and found there are two drivers for that.
rndismpx.sys
usb8023x.sys
I already blocking access to those files with application control but still can't blocck USB tethering.
Kindly help
Thanks/HoaiNguyen
bonjour,
le client Symantec bloque l'internet au niveau des postes clients, quand je lance le scan au niveau de machine utilisateurs le client symantec ne détécte rien
quand je cherche au niveau de la console : Console SEPM--> Monitor--> Network and hosts Exploit Mitigation hots --> RISK: il me donne que le type d'evenement est un Browser Protection (Veuillez trouver ci-joint l'imprime Ecran de cette evenement )
le problème touche presque tous nos clients l'internet est bloqué et le problème devient Sérieux
I have a database file of 3.7GB. Is it possible to shrink the .db file?
Hi Everyone,
Please comment.
1. Can disable windows defender automatically after install agent on the client.
2. Any impact if windows defender and Symantec endpoient agent available on same time on the client machine.
3. Can exclude single client from assign policy.
4. Ransomware protection option is available or not.
Thanks,
Hello everyone,
I'm struggling with SEPM upgrade from 12.1.6 MP7 to 14.0.1 (RU1) on external MSSQL database.
- SEPM 12.1.6 Mp7 on Windows 2016 (I know it's not officially supported but it works ok :)
- MS SQL 2012 Sp3 CU10 on Windows Server 2012 R2
After successful installation of 12.1.6 I'm proceeding with upgrade process to 14.0.1. Installation went ok till about 70% (schema update was successful, packages were built, database indexes also) but it ends up with "Error Occurred". From Upgrade log I got this:
To support,
I am running a linux mail server and I got error message when we send email to some of the customer . Those customer is using your mail filtering service . Error message is
connect to cluster4a.us.messagelabs.com[216.82.251.230]:25: Connection timed out
Our server ip is 218.213.150.105
Please help to check and release our ip for blocking.
regards,
Michael
Prevention status on the UMC is showing that the agent prevention status as disabled although IPS is enabled in the policy. The policy enforces IPS prevention correctly.
Has anyone seen this issue before ?
This issue is happening with Whitelist policy on Windows 2012 Standard 64bit OS.
Running version 6.7.1.49.
Hi all
who have been implement upload access logging client type http client on ProxySG.
please recommend to me or have knowledge base to learn please send to me.
thank you for your help.
Best Regards,
Chakutth R.
Hi,
one of our customers is using SEP in a Citrix PVS environment with a read-only vDisc. He said that after a pattern update there are Pending File Rename operations. Reg-key:
\??\C:\ProgramData\Symantec\Symantec Endpoint Protection\14.0.2332.0100.105\Data\Definitions\SDSDefs\20171114.001\eraser64.sys
\??\C:\ProgramData\Symantec\Symantec Endpoint Protection\14.0.2332.0100.105\Data\Definitions\SDSDefs\20171114.001
How is this supposed to work when the vDisc gets reset after every reboot?
Is this going to corrupt the definitions in any way?
Thanks!
Hi there
We have a Windows 10 machine which had a previous version of Symantec Endpoint installed on the machine, however there was no option within Programs and Features to remove the application. We downloaded Cleanwipe onto the machine and ran the application which appears to have removed the previous version.
When we now try to install Endpoint Protection Cloud onto the machine, the installer complains that "Your installation cannot proceed until you have resolved the following : Restart the Computer". Obviously we have tried restarting the computer without any joy. Upon looking into the issue further on the support website and looking on Google for potential solutions, there were some articles which mentioned that certain registry keys had to be removed if they mentioned "PendingFileRenameOperations".
https://support.symantec.com/en_US/article.TECH98292.html
There were other articles we followed which were of a similar ilk, however none of these appear to have resolved the issue.
Can anyone offer advice on how to resolve this issue?
Many Thanks
Hi,
I have installed Symantec Protection Engine 7.9 on RHEL successfully with SPE based authentication.
I am able to access the SPE web console screen but I am unable to login to the web console application.
If I give the credentials for the login: Administrator which we provided during the installation, it says Login failed or Symantec Protection Engine server is not running.
I have verfified that the SPE is running on the server.
I have tried to go through the documentation or symantec forums but unable to find any information regarding this issue.
I am unable to proceed any further.
Can you please help me with this.
Thanks
Yasir
Hello,
I'm trying to install SEP but get prompted that the computer requires a reboot. This has been done multiple times though so is there anything I can look at?
Trying to install SEP 14.
Thanks!
Hi,
I am using Email spam policy 'Suspected Spam: Modify subject line with "[Suspected Spam]" (default)'. Problem I am having is that 1 mail is being held as Spam though the email address is genuine. I have whitelisted the email address, but it is still being held. How can I bypass the email spam policy for the specific email address?
Thanks to help!