Quantcast
Channel: Symantec Connect - Products - Discussions
Viewing all 18527 articles
Browse latest View live
↧

Persistent Server Connections - enable or disable?

February 11, 2020, 10:36 am
$
0
0
I need a solution

I am noticing in our Symantec Management Agent installation logs the following:

<event date='02/11/2020 11:59:52.0270000 -05:00' severity='4' hostName='jima' source='Agent' module='AeXNSAgent.exe' process='AeXNSAgent.exe' pid='20612' thread='22000' tickCount='8830984'>
  <![CDATA[Failed to establish main persistent server connection, error: Persistent connection is disabled (0x8FA50007)]]>
</event>
<event date='02/11/2020 11:59:52.0270000 -05:00' severity='4' hostName='jima' source='Agent' module='AeXNSAgent.exe' process='AeXNSAgent.exe' pid='20612' thread='22000' tickCount='8830984'>
  <![CDATA[Failed to establish persistent server connection to 'HTTP://<severname>:80/Altiris/WebSockets' using 'Matching' connection profile, error: Persistent connection is disabled (0x8FA50007)]]>
</event>
 

So evidently we have persistent connections disabled.  Should we enable this feature? What are the pros/cons?  What are the questions we should ask before turning it on?  What is the downstream impact of turning it on?  What might break? :)

Thanks
Jim

0
↧
Search

Disk image create and restore issue

February 11, 2020, 5:17 pm
$
0
0
I need a solution

Hello, I have a Windows Server 2012 R2 server with GSS 3.3 installed. Client computer OS is Windows 10, Disk Management looks like attached image "disk_management.png". In diskpart concole the disk and partition information looks like attached image "diskpart.png"
In GSS console:
Create image job command: -CLONE,MODE=CREATE,SRC=2,DST=%IMAGE_FILENAME% -SURE -SPLIT=0 -Z3
Image location: 1:2\Images\Image.gho
Restore image command: -CLONE,MODE=RESTORE,SRC=%IMAGE_FILENAME%,DST=2 -sure
Image location: 1:2\Images\Image.gho

Questions:
1. To create image, if image location set to D:\Images\image.gho, the job seems never complete, status is keeping "Uploading disk image..." unless I delete the job manually. If image location set to 1:2\xx\xx.gho, the job completed successfully. Why this happens?
2. Restore image not work with above ghost command, the warning message is "The Drive number selected for deploying an image connot be same as the Drive number on which the image is stored." Anything wrong in the restore command? Please advise.

0

↧
↧

UPgrading GSS 3.2RU7 to 3.3

February 11, 2020, 5:31 pm
$
0
0
I need a solution

I have GSS 3.2.RU7 installed as a custom setup.  When i run the GSS 3.3 installer it keeps asking for my license file, as if my existing license file for 3.2RU7 is not valid,even though the console clearly shows it is.  The upgrade documentation states that its possible to upgrade form 3.2RU7 to 3.3. Doesnt appear to be the case.  How to i upgrade so i can support newer OS"s without a new lic file?  Created a ticaket and even had a call and i have to say the 1800 number is more than lacking.

0
↧

url/site not accessible through proxy

February 11, 2020, 9:36 pm
$
0
0
I need a solution

Hi,

We have forward explicit proxy. some of the important sites/urls are not accessible when I enable proxy. I tried to whitelist all on proxy but still the sites are not accessible. symantec support also confirmed there is not issue from proxy. when I disbale proxy they are accessibel without any delay. there is fortinet firewall after proxy and edge router. I checked on firewall to see if firewall is blocking the traffic but could not see any issue on fireall. all i can see is there is reset between the remote site and the proxy. did you ever face such issue and any recomendations?

0
↧

IP does not like recipient.

February 12, 2020, 1:21 am
$
0
0
I do not need a solution (just sharing information)

Hi,

I am using office 365 as a mail provider. When I send email from my mac to certain email addresses I get the bounce back message below. When I send the extact same message to the exact same recipient using Outlook online the message gets through no problems. 

Why is this email being blocked using my mac mail but not outlook 365?

Any help much appreciated.

Thanks,

Matt.

Hi. This is the qmail-send program at apm-internet.net.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<aaa@aaa.com>:
67.219.246.101 does not like recipient.
Remote host said: 553-SPF (Sender Policy Framework) domain authentication
553-fail. Refer to the Troubleshooting page at
553-https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fwww.symanteccloud.com%2ftroubleshooting&c=E,1,pc9hEdG61NJSVH7AYssP-yywYul9TSypNsx3RBTdb4TL7v2bHMneVnKqBc9ZeD1QBoe4my3N124U8po0bHHiZAeXEMR3bgcpjJHoFvEa2oPF&typo=1 for more
553 information. (#5.7.1)
Giving up on 67.219.246.101.
STARTTLS proto=TLSv1.2; cipher=ECDHE-RSA-AES256-GCM-SHA384; subject=/C=US/ST=California/L=Mountain View/O=Symantec Corporation/OU=https://linkprotect.cudasvc.com/url?a=https%3a%2f%2f%2f%2fSymantec.cloud%2fCN%3dmail385.messagelabs.com%3b&c=E,1,D8lOzAca7lsjaTLXAGwS1SiiVFfMYaeVAar8gtL8BooaDfYMy_4jwk3PSbbcEmugfMsbGmXHygo_LtDNvMnhwrqbqN7iyBtuOin9qvNsX30wMQ,,&typo=1 issuer=/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA;

--- Below this line is a copy of the message.

0
↧
↧

Upgrading to SEP Cloud need any additional payment

February 12, 2020, 4:25 am
$
0
0
I do not need a solution (just sharing information)

Hello ,

We are planning to upgrade our SEPM 14.2 to SEP cloud .Does we need to pay any addtional chnarges or it is free of cost ?

Thanks

Sujith

0
↧

Encryption Management Server - SMTP AUTH

February 12, 2020, 4:35 am
$
0
0
I need a solution

Hi all,

Is it possible in current SEMS versions to configure an SMTP Authentication? If yes, what are the steps?

Tnx,
D

0

↧

A communication error occurred: "Operation timed out"

February 12, 2020, 5:50 am
$
0
0
I need a solution

Hi everyone,

I need your help trying to understand some inconsistency that we're facing.

We have two proxies (Blue Coat SG) configured in our environment but in one of them we are not accessing a specific website and we're receiving the following message after a while trying to access: A communication error occurred: "Operation timed out"

File attached.

Otherwise, we tried to release the url but it did not work.

Have any idea what could I do?

0

↧
Search

Question about Symantec Splunk Logs

February 12, 2020, 6:45 am
$
0
0
I do not need a solution (just sharing information)

Hi all, 

So we get Symantec Endpoint logs from a customer pushed to Splunk, i'm looking to learn what both of the below files are actually used for

symantec:ep:risk:file
symantec:ep:security:file

The reason i'm asking is because we're looking at what intervals these would expect to send logs to Splunk, any help is much appreciated.

Thanks

Jonathan 

0
↧
↧

Squid and CAS

February 12, 2020, 7:44 am
$
0
0
I do not need a solution (just sharing information)

Hi,

I would like some help, we currently have squid as our proxy and we want to add a CAS to our proxy to scan files that are being downloaded via our proxy. Is it possible to integrate squid with CAS via ICAP

Thanks.

0
↧

Spotted "Chrome Elevation Service" Virus or Malware Please Help

February 12, 2020, 7:49 am
$
0
0
I do not need a solution (just sharing information)

Hi Guys,

We have Symantec Endpoint Protection on our systems, however, looking through task manager I have found Elevation_Service.exe It is causing our laptops cpu usage to go up for no reason even though nothing is running in the task bar? We have run full system scans which took a couple hours and came out clean however I am still very concerned about it and wanted to ask other peoples opinions, Does it mean the chrome browsers have been hijacked? I have done some research and found out it is Google Chrome trying to do some sort of updates in the background causing load on the CPU. According to this site https://securedyou.com/what-is-google-chrome-elevation-service-exe/ I have followed what they suggested and got rid of it manually but it keeps coming back once you reboot the system? Any ideas or recommendations would be appreciated, can someone please confirm that this is not a virus and is harmless. Thank you

0
↧

Can't export client package installation file

February 12, 2020, 7:51 am
$
0
0
I need a solution

Hi Everyone

I installed SEPM 14.2.2 on Windows Server 2008 R2 this server has active directory controller before.

Can't create client install package have error "Failed to export to Group Default Group" following attached.

Please suggestion.

0

↧

Linux client not appending .gho or .ghs to files

February 12, 2020, 7:57 am
$
0
0
I do not need a solution (just sharing information)

When I use the linux client to create an image of a disk, it is not making the .ghs files.  Instead, it continually tries to overwite the same filename without the .gho.  For example if the image name I type is "JohnSmith-desktop", it does not append the ,gho to the end automatically and it keeps writing to the same file over and over again until it reaches about 2 GB and then starts over.  

If I manually put .gho at the end, like "JohnSmith-desktop.gho", then it names the following files, but names them "JohnSmith-desktop.001", "JohnSmith-desktop.002", and so on.  It does not append the .ghs to the end.  

Anybody know how to fix this?

0
↧
↧

Deployment solution can only image 2 machines at any one time.

February 12, 2020, 9:55 am
$
0
0
I need a solution

We have several site servers with deployment soltion installed in our company. All but one can image many machines at a time. I have seen up to 15 machine being imaged at one time. At one of our sites they can ony do 2 at a time.If they try to do more it fails an earier job. Is there any special conguration that needs to be done on the server to allow more? All are using the same global settings. Thansk in advance for any soltions

0
↧

Removal issues with SEP 14

February 12, 2020, 1:06 pm
$
0
0
I do not need a solution (just sharing information)

I have recently begun a process to remove all old Symantec Endpoint Protection 14 installations from many machines.

The issue is about 95% of Windows 7 machines fail to uninstall and return an error of 1603. (Through command line or Powershell). Trying to remove from the control panel will have the progress proceed for a little, then the installer will revert itself. Once this process is completed Internet Explorer is no longer functional on any user logins. It modifies Internet Explorer registry keys during uninstall and doesn't fix them during rollback. The only way to fix it, and restore functionality is to CleanWipe the machine. I have about 600 of these that need to be removed and realistically I cannot be manually running CleanWipe on each one.

What are my options here? I've looked many remote uninstall methods seem to be deprecated or not for use in 14. From what I can tell this is only affecting Windows 7 machines and 10 uninstalled without issues. Any input is appreciated.

0
↧
Search

Few of the SEP clients are out of date /not getting virus definitions

February 12, 2020, 8:17 pm
$
0
0
I need a solution

Hello ,

We use SEPM 14 version to manage our clients. Most of the time 99% SEP clients are up to date with virus definitions. But every time we get an email stating few of the client are out of date and those clients are random .Even though those clients are showing connected to SEPM with green icon .We usually use  smc -stop and -start for some case it may work else we need to reboot the server .In order to avoid reboot we use the Intelligent Updater files  and resolve the problem .Do you have any idea why  few  of the clients failing to  download the virus definitions.Those clients were  downloading /updating definitions from SEPM without any problem .Can anyone share your experiences .

Thanks

Sujith

0
↧

WSS | Cannot login

February 13, 2020, 12:29 am
$
0
0
I need a solution

Dear All

  Please recommend my customer have WSS but when use Customer's account for login to portal following document it have error user not available

How to resolve this issue.

Best Regards,

CR

0
↧
↧

Need to help on opening Administrator Daily Summary Report

February 13, 2020, 12:53 am
$
0
0
I need a solution

Hello,

We usually get Administrator Daily Summary Report from our SEPM servers. But we have noticed one thing that from 14 version onwards we are unable to go through the fields of the Administrator Daily Summary Report. We have tried in almost all browsers (IE,Edge,Chrome and Firefox) and the report is opening but we are unable go through the fields .Especially unable to expand any fields inside .Could you please share your thoughts .Please find the attachments for more details .

Thanks

Sujith

0

↧

How to resolve file reputation alerts

February 13, 2020, 1:00 am
$
0
0
I need a solution

Hello ,

We get file reputation alert from couple of servers with the following information "Reputation check for unproven files failed because of network errors for the last 3 days" .Please note that those servers are hosted on Amazon Cloud and we didn't get any such alert from the servers hosted in office network .Could you please share your thoughts .

Thanks

Sujith

0
↧

Autoupgrade to newest version - unprotected until restart?

February 13, 2020, 1:13 am
$
0
0
I need a solution

Hi everyone,

i need an answer to an important question. I want to rollout the new version with autoupgrade but without forcing a restart.

Is the client unprotected until the restart? If so i have to force it and communicate about it.

Most employees are on the road with customers and cannot have a popup within a presentation or workshop.

I could not find the information here: https://support.symantec.com/us/en/article.howto80780.html

Best regards

Stephan

0
↧
Viewing all 18527 articles
Browse latest View live
Search