SEP 12.1.3 -- Extreme Read I/O-activity slows clients down

August 28, 2013, 12:14 am

I need a solution

Sorry for double-posting this as a reply on a previous thread and as a new topic, but after a week of silence I'm hoping this might lead to a quicker resolution;

We seem to be experiencing a peculiar problem since SEP 12 (still going on with 12.1.3) that's been annoying our fellow admins and users (~3500) for awhile now...

The System-process accumulates a massive amount of read I/O (anywhere from 10-100GB in a workday), about 80 percent of people affected aren't bothered by or notice it but those that do have systems that are almost completely bogged down and unresponsive when the activity kicks in. The slowdown mostly happens a few minutes after login and somewhere later on in the day, most likely after getting the latest definitions. An "SMC -Stop" immediately resolves the issue.

We upgraded from 11.x to 12, after which we started noticing more and more performance complaints. We've already tried using CleanWipe to remove all traces of the upgraded client, and completely reïnstalling the latest package from scratch. Also newly deployed systems exhibit these symptoms. Our SEPM-server is also the latest version. We mostly use Windows 7 x64 SP1 as our baseline OS with the 64-bit client, but can't say for sure if 32-bit XP systems are also affected since we're in the process of migrating those to 7.

It 'feels' like a full scan is performed everytime defs are updated, except that besides a single full scan once a month, there are no configured scheduled scans. Also no status window appears after enabling it and people that are having this issue experience it every single day so that just can't be it. We've tried disabling file cache and rescanning the cache to no avail. There is no significant cpu-activity increase, but disk activity rises to 100% which is sustained until it drops off suddenly. Maybe it's an interaction problem with a different process or service but again, disabling SEP resolves it immediately.

With sysinternals process explorer as well as performance logging we haven't been able to identify the cause. Any help or advice would be greatly appreciated. We hope there are admins out there who dealt with the same issue in their organization and happened to come across the solution.

↧

Cannot connect airport extreme

May 17, 2014, 12:00 pm

≫ Next: trail version of symantec manager

≪ Previous: SEP 12.1.3 -- Extreme Read I/O-activity slows clients down

I need a solution

I am running Windows 7 and have Symantec Endpoint Protection (v12.1.1000.157 RU1). I have a wifi network configured to WPA2. I have been trying to connect an Airport Express (2nd gen). At first, I was unable to "see" the AE on my network (Airport Utility unable to find the base station). After adding firewall rules, I was able to see the base station; however, airplay did not work. I was receiving errors from iTunes "problem connecting error code 15007". In the process of modifying my UDP firewall rule, I can no longer see the AE on my network. Could someone please provide the correct firewall rules (TCP, UDP, etc) that I need to create so that I can both see the AE base station on the network as well as successfully stream music via airplay? Extremely frustrating! Thank you in advance.

↧

trail version of symantec manager

May 13, 2014, 10:22 pm

≫ Next: requirement

≪ Previous: Cannot connect airport extreme

I need a solution

Fromwhere i can download the trail version of symantec manager?

I am in under trainee and want to increase my knowledge on symantec product.

Please provide the link.

↧

requirement

May 17, 2014, 9:39 pm

≫ Next: symantec products

≪ Previous: trail version of symantec manager

I need a solution

What is the requirement to install the symantec endpoint antivirus?

↧

symantec products

May 13, 2014, 10:32 pm

≫ Next: Cannot ResetPass Endpoint Security Manager

≪ Previous: requirement

I need a solution

Which of the symantec products are normally use in official work?

↧

Cannot ResetPass Endpoint Security Manager

May 17, 2014, 10:05 pm

≫ Next: Computer Serial Number

≪ Previous: symantec products

I need a solution

I'm not sure, Why i cannot resetpass for login console manager ?

Please help to find solution for me ?

Thnak you

SNAG-0121.png

1400393497

↧

Computer Serial Number

May 16, 2014, 8:07 am

≫ Next: symantec protection

≪ Previous: Cannot ResetPass Endpoint Security Manager

I need a solution

I see that SEP 12.1.4 shows the computer serial number in the client properties. Is there a log that shows this information for all clients?

↧

symantec protection

May 18, 2014, 10:48 pm

≫ Next: SEPM Embedded database is very large

≪ Previous: Computer Serial Number

I need a solution

How can i protect my iphone from virus with symantec antivirus?

↧

SEPM Embedded database is very large

May 18, 2014, 8:06 pm

≫ Next: how can i protect my files from scanning

≪ Previous: symantec protection

I need a solution

Hi All,

I got a problem to day with my SEPM 12.1 RU4 MP1a.. It was newly installed on my server and have 60 clients only connected. But what i see, the sem5.db is eating up disk space on the server and we don't know what exactly why. What causing this issue and how to reduce its database capacity.. We knew that it is not normal on SEPM because we have another sepm installed (SEPM RU4) with almost 3 clients but not as big as our newly installed SEPM server..

Is this a bug or issue on SEPM 12.1 RU4 MP1a??

Thanks in Advance..

Regards,

↧

how can i protect my files from scanning

May 18, 2014, 10:37 pm

≫ Next: Client been infected by BitCrypt v2.0 cryptovirus

≪ Previous: SEPM Embedded database is very large

I need a solution

i have created a folder in which i m going to save some important files

now i want that files cannot be scan because if they scan and there is some virus detected then i lost my data.

so how can i protect my files from scanning?

↧

Client been infected by BitCrypt v2.0 cryptovirus

April 21, 2014, 8:42 pm

≫ Next: shortcut virus

≪ Previous: how can i protect my files from scanning

I need a solution

Hi All,

Just want to know had any one here come across this ransonware before because this BitCrypt v2.0.

Can i know also did Symantec had any concern about this ransonware and solution?

as SEP seems not strong enough to prevent this ransonware being exploit from client PC.

Can i seek the help from you guy any solution i do in order to remove this kind of ransonware from the end user pc?

Thanks

↧

shortcut virus

May 15, 2014, 8:50 pm

≫ Next: Have moved SEPM to another server but I have further question...

≪ Previous: Client been infected by BitCrypt v2.0 cryptovirus

I need a solution

hi guys,

I am having problem with shortcut virus long time ago at my company.

when I scan the thumb drive with SEMP 12.1 version, the virus still in it.

even the pc infected.

I've tried to use SymHelp but nothing happen.

can you guys show to me how to remove the virus automatically when I plug in the thumb drive?

or may I know the person incharge so that I can contact him/her immediately?

↧

Have moved SEPM to another server but I have further question...

May 16, 2014, 6:16 am

≫ Next: Virus copying jpeg files to exe

≪ Previous: shortcut virus

I need a solution

Hi all,

I followed the steps as outlined at http://www.symantec.com/business/support/index?page=content&id=TECH104389 (used Solution A) and this has worked very well.

However it was not very clear if I need to leave the old server running for a while to ensure all clients are connected to the new server as not all clients are able to connect it instantly e.g. some of them are turned off for a few days, others are left turned off for a week, etc.

My gut is telling me "leave the server on for a few weeks/months" but I'd like to know the 'official' way of doing this as I do not want to miss out any clients.

Thanks all.

Tony

↧

Virus copying jpeg files to exe

May 14, 2014, 8:28 pm

≫ Next: I need help deleting a quarantined file on Symantec Endpoint Protection for Mac

≪ Previous: Have moved SEPM to another server but I have further question...

I need a solution

have anyone encounter this.. we have file in our shared drives ( probably accessed by one of the users) that suddenly have a copy of it self in the form of exe files.

somehow SEP is fail to identify and clean this virus ( if it's a virus )

Any solution / thoughts for it ?

↧

I need help deleting a quarantined file on Symantec Endpoint Protection for Mac

May 30, 2014, 5:29 pm

≫ Next: Gup error

≪ Previous: Virus copying jpeg files to exe

I need a solution

I got a infected file on May 28th, 2014, which Symantec Endpoint Protection quarantined. I want to delete this infected file from my hard drive. I looked online on how to delete a quarantined file, but I am unable to do it. Firstly, when I go to the quarantine window, there is a lock button at the bottom left corner. When I click it, it does not unlock, so I cannot manage my quarantined files. When I hold the button down, it looks like it is unlocked, but when I let go of the button, it locks itself again. Also, I cannot access the Symantec folder under the Application Support folder because it is not there. Hence, I cannot delete the quarantined file from there either. I was wondering if I need to reinstall Symantec Endpoint Protection on my computer, and if the installation driver that I downloaded will allow me to reinstall the software? Thanks!!

↧

Gup error

May 26, 2014, 7:10 pm

≫ Next: some sep 12 clients not updating

≪ Previous: I need help deleting a quarantined file on Symantec Endpoint Protection for Mac

I need a solution

Hi all. where i work we have over 16000 clients and bit more of 80 gups, one of the central gups in HQ is online as a gup, but the updates are being redirected to sepm server which sepm server is on same building, but in diferent subnet since for a while the client was corrupted on the gup it was allowed to go to the sepm console, now that gup is back online the need is go to gup for update. the gup policy that that server is on, was built same way than others that works fine. i made that gup 3 times, and reinstaled the client. client is a win 2k8 and its rol is a NAS server. the other nas server in company are gups and working ok. what can i check? or could be some firewall rule that bloking content download?

Thanks

↧

some sep 12 clients not updating

May 30, 2014, 2:44 pm

≫ Next: Deleting clients from SEPM

≪ Previous: Gup error

I need a solution

I have some sep clients that are not updating their definitions(4 out of 50). I have attached a sylink log from one of them. Is there anything revealing in this.

05/30 16:15:08.905 [1280] ~~~Sylink log started. (SEP Product Version in registry: 12.1.4013.4013, Sylink File Version: 12.1.4013.4013)
05/30 16:15:08.905 [1280] Stored HostGUID=28486330C0A8011000B250E7B2D935FE; outlen=16
05/30 16:15:08.905 [1280] <RestoreSettings>Stored UserGuid=0; outlen=2
05/30 16:15:08.921 [1280] <mfn_DecodeSSN>Sygate-SSN=96844
05/30 16:15:08.921 [1280] <mfn_DecodeSSN>Read CSN=96845
05/30 16:15:08.921 [1280] <mfn_DecodeSSN>Sygate-SSN=19
05/30 16:15:08.921 [1280] <mfn_DecodeSSN>Read CSN=20
05/30 16:15:08.921 [1280] Product Type=1,Major Ver=6,Minor Ver=1,Platform ID=2,OSType=805699842
05/30 16:15:08.921 [1280] OS=Windows 7 Professional Edition; number=6.1.7601
05/30 16:15:08.921 [1280] <InitStatsServer:>initialize CSylinkStatsServer successfully
05/30 16:15:08.921 [1280] SyLinkCreateInstance => Instance created: 00000000030A3210 Registry path: SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK
05/30 16:15:08.921 [1280] <GetOnlineNicInfo>:Netport Count=1
05/30 16:15:08.921 [1280] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.1.161" Mac="d4-3d-7e-5f-8d-04" Gateway="192.168.1.1" SubnetMask="255.255.255.0"/></SSANICs>
05/30 16:15:08.921 [1280] SyLinkCreateConfig => Created instance: 00000000030C2760
05/30 16:15:08.921 [1280] UseNewConfig => Created m_hNewConfig: 00000000030C2760
05/30 16:15:08.921 [1280] Importing ConfigObject: 00000000030A0E10 into: 00000000030C2760
05/30 16:15:08.921 [1280] Importing ConfigObject: 00000000030A0E10 into: 00000000030BFEE0
05/30 16:15:08.921 [1280] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
05/30 16:15:08.921 [1280] SSA packageType is set as 105
05/30 16:15:08.921 [1280] SyLinkDeleteConfig => Deleting instance: 00000000030A0E10
05/30 16:15:08.952 [1280] SyLinkCreateConfig => Created instance: 00000000054DCB30
05/30 16:15:08.952 [1280] SetCurLocationName: Name is set to - Default
05/30 16:15:08.952 [1280] SetCurLocationID: ID is set to - 9E5F664DC0A8011000C9AE3A95DB1472
05/30 16:15:08.952 [1280] SyLinkCreateConfig => Created instance: 00000000054DEF30
05/30 16:15:08.952 [1280] RemeberCurrentGroup=1,RememberCurrentPolicyMode=1
05/30 16:15:08.952 [1280] Importing ConfigObject: 00000000054DEF30 into: 00000000030C2760
05/30 16:15:08.952 [1280] Importing ConfigObject: 00000000054DEF30 into: 00000000030BFEE0
05/30 16:15:08.952 [1280] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
05/30 16:15:08.952 [1280] SyLinkDeleteConfig => Deleting instance: 00000000054DEF30
05/30 16:15:09.015 [1280] SyLinkDeleteConfig => Deleting instance: 00000000054DCB30
05/30 16:15:09.030 [1280] <SetClientAuth>Received new User/Domain from SMC.. User: cxxx User Domain: xxx
05/30 16:15:09.030 [1280] <SetClientAuth>Current Host/ Host domain maybe empty.. Refreshing..
05/30 16:15:09.030 [1280] <GetDomainHostName>msz_DomainName is taken from szDomainName
05/30 16:15:09.030 [1280] <GetDomainHostName>DomainName (Final)=xxx.local
05/30 16:15:09.030 [1280] <SetClientAuth>Getting FQDN from XP or later OS.
05/30 16:15:09.030 [1280] <GetLoginFqdn>user_name's length is: 7
05/30 16:15:09.030 [1280] <GetLoginFqdn>domain_name's length is: 10
05/30 16:15:09.030 [1280] <GetLoginFqdn>The sessions' total amount we get:6
05/30 16:15:09.030 [1280] <GetLoginFqdn>User cxxx FQDN name is xxx.LOCAL
05/30 16:15:09.030 [1280] <SetClientAuth>Setting the User Domain to RDNS Domain ..
05/30 16:15:09.030 [1280] <SetClientAuth>Logged in user info set to: xxx.LOCAL/cxxx
05/30 16:15:09.030 [1280] <SetClientAuth>Marking User Change Notify to redo registration..
05/30 16:15:09.030 [1280] <CSyLink::Start()>
05/30 16:15:09.030 [1280] <EncodeHelper::DecryptUrl>
05/30 16:15:09.030 [1280] <CSyLink::Start> The last server used was '192.168.1.16'
05/30 16:15:09.030 [1280] <CSyLink::ImportConfigFile()>
05/30 16:15:09.030 [1280] CUpdateConfig::Dump
<Client Package-Checksum: a18e76110f046aec1d5828513c0d5987, DownloadStartTime: 0:0, DurationMin: 1439, RandomizeTime: 0>
05/30 16:15:09.030 [1280] Calculating checksum of config.xml disk file..
05/30 16:15:09.030 [1280] checksum of config.xml disk file is: 2B645DC1C38FB1B9E529ECDC415B0414
05/30 16:15:09.030 [1280] checksum of config.xml disk file written to registry : ClientConfigFileChecksumOnStartup
05/30 16:15:09.030 [1280] </CSyLink::ImportConfigFile()>
05/30 16:15:09.030 [1280] <GetDomainHostName>msz_DomainName is taken from szDomainName
05/30 16:15:09.030 [1280] <GetDomainHostName>DomainName (Final)=xxx.local
05/30 16:15:09.030 [1280] <CalculateLicenseChecksums>Unable to calculate snac license file checksum
05/30 16:15:09.046 [1280] <Start>User proxy information was not available - not creating session handle..
05/30 16:15:09.046 [1280] <HWID CSyLink::mfn_CalcHardwareKey> Get Hardware ID
05/30 16:15:09.295 [1280] <HWID CSyLink::mfn_CalcHardwareKey> Hardware ID assigned: D8087A96FF223B93F8D326E0D38348F9
05/30 16:15:09.295 [1040] <ScheduleNextUpdate>Manually assigned heartbeat=284 seconds
05/30 16:15:09.295 [5640] <HeartbeatThreadProc:>Thread is about to begin..
05/30 16:15:09.295 [1040] Successfully created the heartbeat thread
05/30 16:15:09.295 [1280] <Start>Started, contact SMS every 300 seconds
05/30 16:15:09.311 [1280] </CSyLink::Start()>
05/30 16:15:09.342 [1280] <SetClientAuth>Received new User/Domain from SMC.. User: cxxx User Domain: xxx
05/30 16:15:09.342 [1280] <SetClientAuth>Getting FQDN from XP or later OS.
05/30 16:15:09.342 [1280] <GetLoginFqdn>user_name's length is: 7
05/30 16:15:09.342 [1280] <GetLoginFqdn>domain_name's length is: 10
05/30 16:15:09.342 [1280] <GetLoginFqdn>The sessions' total amount we get:6
05/30 16:15:09.342 [1280] <GetLoginFqdn>User cxxx FQDN name is xxx.LOCAL
05/30 16:15:09.342 [1280] <SetClientAuth>Setting the User Domain to RDNS Domain ..
05/30 16:15:09.342 [1280] <SetClientAuth>Logged in user info set to: xxx.LOCAL/cxxx
05/30 16:15:09.342 [1280] <SetClientAuth>Marking User Change Notify to redo registration..
05/30 16:15:09.810 [5640] [Content]<CSyLink::LoadLUInfo> Previous LU data was not loaded or found
05/30 16:15:09.810 [5640] <CheckHeartbeatTimer>====== Heartbeat loop starts at 16:15:09 ======
05/30 16:15:10.325 [5640] <GetOnlineNicInfo>:Netport Count=1
05/30 16:15:10.325 [5640] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.1.161" Mac="d4-3d-7e-5f-8d-04" Gateway="192.168.1.1" SubnetMask="255.255.255.0"/></SSANICs>
05/30 16:15:10.840 [5640] <CalcAgentHashKey>:CH=DF32C52FC0A8011000837FAB784F6C0A1xxx-Cxxx-W7xxx.localD8087A96FF223B93F8D326E0D38348F9
05/30 16:15:10.840 [5640] <CalcAgentHashKey>:CHKey=C5C7EED12F8FCD83835EE0F79CECD0C4
05/30 16:15:10.840 [5640] <CalcAgentHashKey>:C=DF32C52FC0A8011000837FAB784F6C0A1xxx-Cxxx-W7xxx.local
05/30 16:15:10.840 [5640] <CalcAgentHashKey>:CKey=64EB7C7339C63D0AF54E623EE15EF307
05/30 16:15:10.840 [5640] <CalcAgentHashKey>:UCH=DF32C52FC0A8011000837FAB784F6C0A0cxxxxxx.LOCALxxx-Cxxx-W7xxx.localD8087A96FF223B93F8D326E0D38348F9
05/30 16:15:10.840 [5640] <CalcAgentHashKey>:UCHKey=4F94BB9AEB155B8CDEC37391C5B9298B
05/30 16:15:10.840 [5640] <CalcAgentHashKey>:UC=DF32C52FC0A8011000837FAB784F6C0A0cxxxxxx.LOCALxxx-Cxxx-W7xxx.local
05/30 16:15:10.840 [5640] <CalcAgentHashKey>:UCKey=637969E9DDF987BF3AB6D5EAFD8A0C62
05/30 16:15:10.840 [5640] <DoHeartbeat>HardwareID=D8087A96FF223B93F8D326E0D38348F9
05/30 16:15:10.840 [5640] <DoHeartbeat>CHKey=C5C7EED12F8FCD83835EE0F79CECD0C4
05/30 16:15:10.840 [5640] <DoHeartbeat>CKey=64EB7C7339C63D0AF54E623EE15EF307
05/30 16:15:10.840 [5640] <DoHeartbeat>UCHKey=4F94BB9AEB155B8CDEC37391C5B9298B
05/30 16:15:10.840 [5640] <DoHeartbeat>UCKey=637969E9DDF987BF3AB6D5EAFD8A0C62
05/30 16:15:10.840 [5640] <DoHeartbeat> Set heartbeat event
05/30 16:15:10.840 [5640] Use new configuration
05/30 16:15:10.840 [5640] HeartbeatProc: Trying to craete user session again with proxy setting now that user login has changed..
05/30 16:15:10.840 [5640] HeartbeatProc: User proxy information was not available still - not creating session handle..
05/30 16:15:10.840 [5640] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 16:15:10 ======
05/30 16:15:11.355 [5640] 05/30 16:15:11.355 [3472] HEARTBEAT: Check Point 1SyLinkCreateConfig => Created instance: 00000000054EA7E0

05/30 16:15:11.355 [3472] Importing ConfigObject: 00000000030BFEE0 into: 00000000054EA7E0
05/30 16:15:11.355 [5640] HEARTBEAT: Check Point 2
05/30 16:15:11.355 [3472] SyLinkDeleteConfig => Deleting instance: 00000000054EA7E0
05/30 16:15:11.355 [5640] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
05/30 16:15:11.355 [5640] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
05/30 16:15:11.355 [5640] HEARTBEAT: Check Point 3
05/30 16:15:11.355 [5640] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
05/30 16:15:11.370 [5640] HEARTBEAT: Check Point 4
05/30 16:15:11.370 [5640] <RegHeartbeatProc>===Registration STAGE===
05/30 16:15:11.370 [5640] <MakeRegisterData:>logon id (domain/user)=xxx.LOCAL/cxxx
05/30 16:15:11.370 [5640] <GeneratePreferredGroupAndModeInRegistration:>Loading current group:My Company\xxx-xxx
05/30 16:15:11.370 [5640] <GeneratePreferredGroupAndModeInRegistration:>Loading current mode:1
05/30 16:15:11.370 [5640] <GeneratePreferredGroupAndModeInRegistration:>Loading preferred group:My Company\xxx-xxx
05/30 16:15:11.370 [5640] <GeneratePreferredGroupAndModeInRegistration:>Loading preferred mode:1
05/30 16:15:11.370 [5640] <GeneratePreferredGroupAndModeInRegistration:>The client once registered to server, using the current group: My Company\xxx-xxxand current mode: 1
05/30 16:15:11.370 [5640] <GeneratePreferredGroupAndModeInRegistration:>It will remember both current group and mode, PreferredGroup is My Company\xxx-xxx, PreferredMode is 1
05/30 16:15:11.370 [5640] <MakeRegisterData:>XML data: <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="DF32C52FC0A8011000837FAB784F6C0A" AgentType="105" UserDomain="xxx.LOCAL" LoginUser="cxxx" ComputerDomain="xxx.local" ComputerName="xxx-Cxxx-W7" PreferredGroup="My%20Company%5cxxx-xxx" PreferredMode="1" KnownClientID="28486330C0A8011000B250E7B2D935FE" HardwareKey="D8087A96FF223B93F8D326E0D38348F9" IsNPVDIClient="0" SiteDomainName=""/>

</SSAHostInfo>

</SSARegData>
05/30 16:15:11.370 [5640] <SyLink>[MakeRegisterData] registration Hardware Key=D8087A96FF223B93F8D326E0D38348F9
05/30 16:15:11.370 [5640] ************Reg CSN=21
05/30 16:15:11.370 [5640] <mfn_GenPostData (for Registration):>Request is: s_origin_length: 1520

s_session_id: D8087A96FF223B93F8D326E0D38348F9

Sygate-SSN: 21

<?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="DF32C52FC0A8011000837FAB784F6C0A" AgentType="105" UserDomain="xxx.LOCAL" LoginUser="cxxx" ComputerDomain="xxx.local" ComputerName="xxx-Cxxx-W7" PreferredGroup="My%20Company%5cxxx-xxx" PreferredMode="1" KnownClientID="28486330C0A8011000B250E7B2D935FE" HardwareKey="D8087A96FF223B93F8D326E0D38348F9" IsNPVDIClient="0" SiteDomainName=""/>

</SSAHostInfo>

</SSARegData>
05/30 16:15:11.370 [5640] <SendRegistrationRequest:>http://192.168.1.16:8014
05/30 16:15:11.370 [5640] 16:15:11=>Send HTTP REQUEST
05/30 16:15:11.464 [5640] 16:15:11=>HTTP REQUEST sent
05/30 16:15:11.464 [5640] 16:15:11=>QUERY return code
05/30 16:15:11.464 [5640] 16:15:11=>QUERY return code completed
05/30 16:15:11.464 [5640] <SendRegistrationRequest:>SMS return=200
05/30 16:15:11.464 [5640] <ParseHTTPStatusCode:>200=>200 OK
05/30 16:15:11.464 [5640] <SendRegistrationRequest:>Content Lenght => 1148
05/30 16:15:11.464 [5640] HTTP returns status code=200
05/30 16:15:11.464 [5640] <mfn_ParseRegResponse> Server product version is 12.1.4013.4013
05/30 16:15:11.464 [5640] <mfn_ParseRegResponse> DataHandler count is 11
05/30 16:15:11.464 [5640] <mfn_ParseRegResponse> Tech ID: SEP Version 1 entries: 1
05/30 16:15:11.464 [5640] <mfn_ParseRegResponse> Tech ID: AvMan Version 1 entries: 2
05/30 16:15:11.464 [5640] <mfn_ParseRegResponse> Tech ID: LuMan Version 1 entries: 3
05/30 16:15:11.464 [5640] <mfn_ParseRegResponse> Tech ID: NacMan Version 1 entries: 4
05/30 16:15:11.464 [5640] <mfn_ParseRegResponse> Tech ID: LicVer Version 1 entries: 5
05/30 16:15:11.464 [5640] <mfn_ParseRegResponse> Tech ID: GUP Version 1 entries: 6
05/30 16:15:11.464 [5640] <mfn_ParseRegResponse> Tech ID: BashMan Version 1 entries: 7
05/30 16:15:11.464 [5640] <mfn_ParseRegResponse> Tech ID: CidsMan Version 1 entries: 8
05/30 16:15:11.464 [5640] <mfn_ParseRegResponse> Tech ID: ElamMan Version 1 entries: 9
05/30 16:15:11.464 [5640] <mfn_ParseRegResponse> Tech ID: SVA Version 1 entries: 10
05/30 16:15:11.464 [5640] <mfn_ParseRegResponse> Tech ID: vSIC Version 1 entries: 11
05/30 16:15:11.464 [5640] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
05/30 16:15:11.464 [5640] <SendRegistrationRequest:>COMPLETED, returned 0
05/30 16:15:11.479 [5640] HEARTBEAT: Check Point 5.1
05/30 16:15:11.479 [5640] <ScheduleNextUpdate>Manually assigned heartbeat=3 seconds
05/30 16:15:11.479 [5640] <PostEvent>going to post event=EVENT_SERVER_ONLINE
05/30 16:15:11.479 [5640] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
05/30 16:15:11.479 [5640] HEARTBEAT: Check Point 8
05/30 16:15:11.479 [5640] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
05/30 16:15:11.479 [5640] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
05/30 16:15:11.479 [5640] <RegHeartbeatProc>====== Registration Procedure stops at 16:15:11 ======
05/30 16:15:11.479 [5640] HEARTBEAT: Check Point 10
05/30 16:15:11.667 [1276] <SetClientAuth>Received new User/Domain from SMC.. User: cxxx User Domain: xxx
05/30 16:15:11.667 [1276] <SetClientAuth>Getting FQDN from XP or later OS.
05/30 16:15:11.667 [1276] <GetLoginFqdn>user_name's length is: 7
05/30 16:15:11.667 [1276] <GetLoginFqdn>domain_name's length is: 10
05/30 16:15:11.667 [1276] <GetLoginFqdn>The sessions' total amount we get:6
05/30 16:15:11.667 [1276] <GetLoginFqdn>User cxxx FQDN name is xxx.LOCAL
05/30 16:15:11.667 [1276] <SetClientAuth>Setting the User Domain to RDNS Domain ..
05/30 16:15:11.667 [1276] <SetClientAuth>Logged in user info set to: xxx.LOCAL/cxxx
05/30 16:15:11.667 [1276] <SetClientAuth>Marking User Change Notify to redo registration..
05/30 16:15:11.994 [5640] HEARTBEAT: Check Point Complete
05/30 16:15:11.994 [5640] <RegHeartbeatProc>Done, Heartbeat=3seconds
05/30 16:15:11.994 [5640] <PostEvent>going to post event=EVENT_SERVER_HEARTBEAT_COMPLETE
05/30 16:15:11.994 [5640] <PostEvent>done post event=EVENT_SERVER_HEARTBEAT_COMPLETE, return=0
05/30 16:15:11.994 [5640] <CheckHeartbeatTimer>====== Heartbeat loop stops at 16:15:11 ======
05/30 16:15:15.083 [5640] <CheckHeartbeatTimer>====== Heartbeat loop starts at 16:15:15 ======
05/30 16:15:15.598 [5640] <GetOnlineNicInfo>:Netport Count=1
05/30 16:15:15.598 [5640] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.1.161" Mac="d4-3d-7e-5f-8d-04" Gateway="192.168.1.1" SubnetMask="255.255.255.0"/></SSANICs>
05/30 16:15:15.598 [5640] <CalcAgentHashKey>:CH=DF32C52FC0A8011000837FAB784F6C0A1xxx-Cxxx-W7xxx.localD8087A96FF223B93F8D326E0D38348F9
05/30 16:15:15.598 [5640] <CalcAgentHashKey>:CHKey=C5C7EED12F8FCD83835EE0F79CECD0C4
05/30 16:15:15.598 [5640] <CalcAgentHashKey>:C=DF32C52FC0A8011000837FAB784F6C0A1xxx-Cxxx-W7xxx.local
05/30 16:15:15.598 [5640] <CalcAgentHashKey>:CKey=64EB7C7339C63D0AF54E623EE15EF307
05/30 16:15:15.598 [5640] <CalcAgentHashKey>:UCH=DF32C52FC0A8011000837FAB784F6C0A0cxxxxxx.LOCALxxx-Cxxx-W7xxx.localD8087A96FF223B93F8D326E0D38348F9
05/30 16:15:15.598 [5640] <CalcAgentHashKey>:UCHKey=4F94BB9AEB155B8CDEC37391C5B9298B
05/30 16:15:15.598 [5640] <CalcAgentHashKey>:UC=DF32C52FC0A8011000837FAB784F6C0A0cxxxxxx.LOCALxxx-Cxxx-W7xxx.local
05/30 16:15:15.598 [5640] <CalcAgentHashKey>:UCKey=637969E9DDF987BF3AB6D5EAFD8A0C62
05/30 16:15:15.598 [5640] <DoHeartbeat>HardwareID=D8087A96FF223B93F8D326E0D38348F9
05/30 16:15:15.598 [5640] <DoHeartbeat>CHKey=C5C7EED12F8FCD83835EE0F79CECD0C4
05/30 16:15:15.598 [5640] <DoHeartbeat>CKey=64EB7C7339C63D0AF54E623EE15EF307
05/30 16:15:15.598 [5640] <DoHeartbeat>UCHKey=4F94BB9AEB155B8CDEC37391C5B9298B
05/30 16:15:15.598 [5640] <DoHeartbeat>UCKey=637969E9DDF987BF3AB6D5EAFD8A0C62
05/30 16:15:15.598 [5640] <DoHeartbeat> Set heartbeat event
05/30 16:15:15.598 [5640] Use new configuration
05/30 16:15:15.598 [5640] <CSyLink::IndexHeartbeatProc()>
05/30 16:15:15.598 [5640] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 00000000030BFEE0
05/30 16:15:15.598 [5640] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 16:15:15 ======
05/30 16:15:16.113 [5640] HEARTBEAT: Check Point 1
05/30 16:15:16.113 [5640] Get First Server!
05/30 16:15:16.113 [5640] HEARTBEAT: Check Point 2
05/30 16:15:16.113 [5640] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
05/30 16:15:16.113 [5640] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
05/30 16:15:16.113 [5640] HEARTBEAT: Check Point 3
05/30 16:15:16.113 [5640] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
05/30 16:15:16.113 [5640] HEARTBEAT: Check Point 4
05/30 16:15:16.113 [5640] <IndexHeartbeatProc>===Get Index STAGE===
05/30 16:15:16.113 [5640] ************CSN=96846
05/30 16:15:16.113 [5640] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=28486330C0A8011000B250E7B2D935FE&chk=C5C7EED12F8FCD83835EE0F79CECD0C4&ck=64EB7C7339C63D0AF54E623EE15EF307&uchk=4F94BB9AEB155B8CDEC37391C5B9298B&uck=637969E9DDF987BF3AB6D5EAFD8A0C62&hid=D8087A96FF223B93F8D326E0D38348F9&groupid=DF32C52FC0A8011000837FAB784F6C0A&ClientProductVersion=12.1.4013.4013&mode=0&hbt=300&as=96846&cn=[hex]4A412D4354415545522D5737&lun=[hex]637461756572&udn=[hex]4A41484F5553544F4E2E4C4F43414C
05/30 16:15:16.113 [5640] <GetIndexFileRequest:>http://192.168.1.16:8014/secars/secars.dll?h=98FF90397029C1475BB8250EEA28B60E5CAEA0A0A11FCF79F4255C7A97ED90C22A988B59CBBEF6F18263507EFF293FF536A1612EB0A3D8D69CA084134E596E5504D2361D81B83271BE276657CBB645BE3BF496B8F8BAE09E8AEED8D151D513288D91443B80E7306E58C783B5171B4A1E40B1DE6509BF86F86EC3F4A62D00EB9A0CB65616D454448F419FA72832F069D6B5156F3769D45ACCA13B070D768CABD35C3A8AAFBCCA7B9B916FC6CA53C9596616987FE02B5A1783AEC987309EBE694CE01068681898E8ED291389D3D38E99622D298BF46AC434976CD8321B76D5FA0C47E7D196985FF7704DEA5C73A662D5C68DD394C3E0F02B0B08326EB1AC2F341C29570F32F7F63D99D5C0F0A1EE5574FA56A4B792EE18E354ED6C6320C86DBF92AEEDAC05B8404DB680F46DC68C82D576026EC5F7985B96BB541B0DA9B542A47735D4544736C8D2F88C0256AB1DD0A2CE0A49204B0F4ED9F068666400877BBFBEE1847132C3B18226F9A586C2F75B831D7DB29027EA78322F2D56D9E0D7F6EF0526C386BE11F0E395C3CDD1C7DDEEE9FDB111F8E6E7C37822EBA1697F03D757FFEDEE6C5DEA9C16BE45C8EC4B6C0C03A9A4224FB151A85F8362E0A74E45DF7351
05/30 16:15:16.113 [5640] 16:15:16=>Send HTTP REQUEST
05/30 16:15:16.144 [5640] 16:15:16=>HTTP REQUEST sent
05/30 16:15:16.144 [5640] <GetIndexFileRequest:>SMS return=200
05/30 16:15:16.144 [5640] <ParseHTTPStatusCode:>200=>200 OK
05/30 16:15:16.144 [5640] <FindHeader>Sem-HashKey:=>C5C7EED12F8FCD83835EE0F79CECD0C4
05/30 16:15:16.144 [5640] <GetIndexFileRequest:>Loading the current mode:1
05/30 16:15:16.144 [5640] <FindHeader>Sem-LANSensor:=>0
05/30 16:15:16.144 [5640] <FindHeader>Sem-Signatue:=>57CF27032A0D80B739639544994759B00C5C2A1348237F282B35CA3DD448CC6EE18EE1A2A193EF50ED466713FFE25BDDE05AC413C8B104655B3176D11CB90D4CF6D927EABA171E4569FFE24FCACE42C5E8B12606E2A13190CFF1297D6038BAF4CACB30002CEDE54ACA366A61C87D6E3E96D496FC4C22CA73F2E4EA5FFA80B05F
05/30 16:15:16.144 [5640] <mfn_DoGetIndexFile200>Content Length => 1842
05/30 16:15:16.144 [5640] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
05/30 16:15:16.144 [5640] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="D825B2FEC0A80110012F81C3E38C4AC8" ServerID="B2D9EBD1C0A8011000137D07536CEFA7" GroupID="C63C4A27C0A80110013A6137E6EFC65D" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "30/05/2014 12:28:08">   <Profile Checksum="E4DD01DBD5DE75DB09D8C00A384EDDC1" SerialNumber="C63C-01/08/2014 20:54:56 444" LastModifiedTime="30/01/2014 01:00:23"/>   <ConfigFile Checksum="2B645DC1C38FB1B9E529ECDC415B0414" LastModifiedTime="30/12/2013 10:12:47"/>   <IDSFile Checksum="97687F2BB28E62EBBDF0DFA74AE237ED" LastModifiedTime="06/01/2014 11:28:49"/>   <SylinkFile Checksum="E77197A4F3A11A18D8626393C9CACF64" LastModifiedTime="30/01/2014 01:00:23"/>
   <LiveUpdate>
       <File Checksum="A7074510BCFBE87B9BE8BF1D96D23D83" DeltaFlag="1" FullSize="399822369" LastModifiedTime="1401470602546" Moniker="{535CB6A4-441F-4e8a-A897-804CD859100E}" Seq="140530001"/>
       <File Checksum="3C1F840B13ED19029F4FBE3F6CDD825D" DeltaFlag="1" FullSize="114869" LastModifiedTime="1401470408850" Moniker="{810D5A61-809F-49c2-BD75-177F0647D2BA}" Seq="140530009"/>
       <File Checksum="BBBD2F825262C454E0D0F68AEB769BD2" DeltaFlag="1" FullSize="401861848" LastModifiedTime="1401469975327" Moniker="{07B590B3-9282-482f-BBAA-6D515D385869}" Seq="140530001"/>
       <File Checksum="4973118B0F8650E761768B7741BC664F" DeltaFlag="1" FullSize="40857" LastModifiedTime="1401455262426" Moniker="{EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758}" Seq="140530003"/>
       <File Checksum="D1048756CF83D3F80F6B5BB774114154" DeltaFlag="1" FullSize="1195753" LastModifiedTime="1401410432485" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="140529001"/>
       <File Checksum="656C39E1B3BE91523C016CA85132B1E2" DeltaFlag="1" FullSize="4989399" LastModifiedTime="1401410419007" Moniker="{55DE35DC-862A-44c9-8A2B-3EF451665D0A}" Seq="140529011"/>
       <File Checksum="F8B3CC8BEBA8CB4F17D1F572CD4B0980" DeltaFlag="1" FullSize="1171418" LastModifiedTime="1401409609562" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="140529001"/>
       <File Checksum="FE4D43C8CD3A732922575878154511B4" DeltaFlag="1" FullSize="4012512" LastModifiedTime="1401231695440" Moniker="{D6AEBC07-D833-485f-9723-6C908D37F806}" Seq="140510011"/>
       <File Checksum="2EE31A0EAA54FDE7E5DE18C3ADFE3387" DeltaFlag="1" FullSize="13460" LastModifiedTime="1400273675726" Moniker="{E8827B4A-4F58-4dea-8C93-07B32A63D1C5}" Seq="140516004"/>
       <File Checksum="CC62D0525D86B2E1A741B5628D074629" DeltaFlag="1" FullSize="8340" LastModifiedTime="1388412101797" Moniker="{263395A0-D3D8-4be4-80B5-202C94EF4AA0}" Seq="130708001"/>
       <File Checksum="B5DECB025D33F97DAE2210255300C4C7" DeltaFlag="1" FullSize="8993" LastModifiedTime="1388412093072" Moniker="{50B092DE-40D5-4724-971B-D3D90E9EE987}" Seq="120726050"/>
       <File Checksum="CC69DD0877AE67A2B685D84EEFF95F4B" DeltaFlag="1" FullSize="27856" LastModifiedTime="1388411897764" Moniker="{B6DC6C8F-46FA-40c7-A806-B669BE1D2D19}" Seq="131024024"/>
       <File Checksum="AC54D31479555CBE0B13A5CDF0F85497" DeltaFlag="1" FullSize="715595" LastModifiedTime="1388411885262" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
       <File Checksum="ED294B72927C27D239D0D65C45E660E0" DeltaFlag="1" FullSize="92071" LastModifiedTime="1388411895614" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
       <File Checksum="0AA79F65A2DB3157648683B84E6F3484" DeltaFlag="1" FullSize="6895" LastModifiedTime="1388411900764" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="131024024"/>
       <File Checksum="4ECF8CFE48F6018E3B0D338A28CDA029" DeltaFlag="1" FullSize="1775764" LastModifiedTime="1388411901570" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
       <File Checksum="D4C8758E1C570C1CAF9AB55A137FAC44" DeltaFlag="1" FullSize="1494320" LastModifiedTime="1388412097474" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
       <File Checksum="C61EAD5C8938938BC60910A789D3E826" DeltaFlag="1" FullSize="88892" LastModifiedTime="1401455242223" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="140530003"/>
       <File Checksum="7A845C55AA0DE36509C8101E842F8D4D" DeltaFlag="1" FullSize="13136280" LastModifiedTime="1401455248120" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="140530003"/>
       <File Checksum="067EC2BC3C9AC153549D5D3B866EF89B" DeltaFlag="1" FullSize="13136299" LastModifiedTime="1401455287652" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="140530003"/>
       <File Checksum="4EEBAE56164954AB34CE503C8EDAD310" DeltaFlag="1" FullSize="88876" LastModifiedTime="1401455300725" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="140530003"/>
       <File Checksum="BBBD2F825262C454E0D0F68AEB769BD2" DeltaFlag="1" FullSize="401861848" LastModifiedTime="1401469975327" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="140530001"/>
       <File Checksum="A7074510BCFBE87B9BE8BF1D96D23D83" DeltaFlag="1" FullSize="399822369" LastModifiedTime="1401470602546" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="140530001"/>

</LiveUpdate>
</GroupIndex>
05/30 16:15:16.144 [5640] <mfn_DoGetIndexFile200>Parser Index File!
05/30 16:15:16.144 [5640] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
05/30 16:15:16.144 [5640] <GetIndexFileRequest:>COMPLETED
05/30 16:15:16.144 [5640] <IndexHeartbeatProc>GetIndexFile handling status: 0
05/30 16:15:16.144 [5640] <IndexHeartbeatProc>Switch Server flag=0
05/30 16:15:16.159 [5640] HEARTBEAT: Check Point 5.1
05/30 16:15:16.159 [5640] <IsInClientIPorOnLink> NextHop is OnLink with 192.168.1.161,return TRUE
05/30 16:15:16.159 [5640] <mfn_GetOutIP> Out IP is:192.168.1.161
05/30 16:15:16.159 [5640] <IndexHeartbeatProc> Saved IP Address: 192.168.1.16
05/30 16:15:16.159 [5640] <ContentSynchronizer::CheckDependencyDone>:Start to work
05/30 16:15:16.159 [5640] <ContentSynchronizer::CheckDependencyDone>:the profile doesn't depend on any content
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {535CB6A4-441F-4e8a-A897-804CD859100E} Sequence: 140530001
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {810D5A61-809F-49c2-BD75-177F0647D2BA} Sequence: 140530009
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {07B590B3-9282-482f-BBAA-6D515D385869} Sequence: 140530001
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758} Sequence: 140530003
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Sequence: 140529001
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {55DE35DC-862A-44c9-8A2B-3EF451665D0A} Sequence: 140529011
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Sequence: 140529001
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {D6AEBC07-D833-485f-9723-6C908D37F806} Sequence: 140510011
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {E8827B4A-4F58-4dea-8C93-07B32A63D1C5} Sequence: 140516004
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {263395A0-D3D8-4be4-80B5-202C94EF4AA0} Sequence: 130708001
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {50B092DE-40D5-4724-971B-D3D90E9EE987} Sequence: 120726050
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {B6DC6C8F-46FA-40c7-A806-B669BE1D2D19} Sequence: 131024024
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {C25CEA47-63E5-447b-8D95-C79CAE13FF79} Sequence: 80929016
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {EA960B33-2196-4d53-8AC4-D5043A5B6F9B} Sequence: 80820001
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {4F889C4A-784D-40de-8539-6A29BAA43139} Sequence: 131024024
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Sequence: 80820001
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {C13726A9-8DF7-4583-9B39-105B7EBD55E2} Sequence: 80820001
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Sequence: 140530003
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Sequence: 140530003
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Sequence: 140530003
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Sequence: 140530003
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Sequence: 140530001
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>Current index2 content entry: Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Sequence: 140530001
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LICENSE_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LICENSE_REQUIRE_STATUS, return=0
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
05/30 16:15:16.159 [5640] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
05/30 16:15:16.159 [5640] [Content]<mfn_LiveUpdate:>EVENT_LU_REQUIRE_STATUS: Unknown content type. This content is not supported on this endpoint.
05/30 16:15:16.159 [5640] <PostEvent>going to post event=EVENT_PACKAGE_REQUIRE_STATUS
05/30 16:15:16.237 [5640] <PostEvent>done post event=EVENT_PACKAGE_REQUIRE_STATUS, return=17
05/30 16:15:16.237 [5640] <mfn_GetClientPackage> The package at Index 0 is NOT needed by the client .. Going to the next package..
05/30 16:15:16.237 [5640] <PostEvent>going to post event=EVENT_SERVER_ONLINE
05/30 16:15:16.237 [5640] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
05/30 16:15:16.237 [5640] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=300 seconds
05/30 16:15:16.237 [5640] <ContentSynchronizer::CheckDependencyDone>:Start to work
05/30 16:15:16.237 [5640] <ContentSynchronizer::CheckDependencyDone>:the profile doesn't depend on any content
05/30 16:15:16.237 [5640] HEARTBEAT: Check Point 6
05/30 16:15:16.237 [5640] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE OBJECT: CommonMan
05/30 16:15:16.237 [5640] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE STRING USING LEGACY API: CommonMan
05/30 16:15:16.237 [5640] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE OBJECT: LocalRep
05/30 16:15:16.237 [5640] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE STRING USING LEGACY API: LocalRep
05/30 16:15:16.237 [5640] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE OBJECT: AVMan
05/30 16:15:16.393 [5640] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE STRING USING LEGACY API: GUP
05/30 16:15:16.393 [5640] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE OBJECT: LUMan
05/30 16:15:16.393 [5640] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE OBJECT: AtpiMan
05/30 16:15:16.393 [5640] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE OBJECT: BashMan
05/30 16:15:16.393 [5640] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE STRING USING LEGACY API: BashMan
05/30 16:15:16.393 [5640] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE OBJECT: CidsMan
05/30 16:15:16.393 [5640] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE STRING USING LEGACY API: CidsMan
05/30 16:15:16.393 [5640] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE OBJECT: RepMgtMan
05/30 16:15:16.393 [5640] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE OBJECT: SubmissionsMan
05/30 16:15:16.393 [5640] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE STRING USING LEGACY API: SubmissionsMan
05/30 16:15:16.393 [5640] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
05/30 16:15:16.393 [5640] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
05/30 16:15:16.393 [5640] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
05/30 16:15:16.393 [5640] ReasonDescForFailure*** = Host Integrity check is disabled.
Host Integrity policy has been disabled by the administrator.
05/30 16:15:16.393 [5640] Value retrieved from registry for UserDisabledFirewall : 0
05/30 16:15:16.393 [5640] Firewall is off by policy.
05/30 16:15:16.393 [5640] Firewall Status is 3. (Opstate -> eOFF_BY_POLICY)
05/30 16:15:16.393 [5640] iterating through plugins to find the reboot manager
05/30 16:15:16.393 [5640] iterating through plugins to find the reboot manager
05/30 16:15:16.393 [5640] iterating through plugins to find the reboot manager
05/30 16:15:16.393 [5640] iterating through plugins to find the reboot manager
05/30 16:15:16.393 [5640] iterating through plugins to find the reboot manager
05/30 16:15:16.393 [5640] iterating through plugins to find the reboot manager
05/30 16:15:16.393 [5640] iterating through plugins to find the reboot manager
05/30 16:15:16.393 [5640] iterating through plugins to find the reboot manager
05/30 16:15:16.393 [5640] iterating through plugins to find the reboot manager
05/30 16:15:16.393 [5640] iterating through plugins to find the reboot manager
05/30 16:15:16.393 [5640] iterating through plugins to find the reboot manager
05/30 16:15:16.393 [5640] found rebootmgr plugin
05/30 16:15:16.393 [5640] found rebootmgr function pointers
05/30 16:15:16.393 [5640] rebootmgr opstate: <RebootRequired Status="0"></RebootRequired>
05/30 16:15:16.393 [5640] appending rebootmgr opstate
05/30 16:15:16.393 [5640] *** = <SSAInfo NameSpace="rpc" AgentID="28486330C0A8011000B250E7B2D935FE" ComputerID="09EB5CC6C0A8011000B250E77205E176" HardwareKey="D8087A96FF223B93F8D326E0D38348F9" GroupID="C63C4A27C0A80110013A6137E6EFC65D">

</AgentHIInfo>

</SSAHostInfo>

</SSAInfo>

05/30 16:15:16.393 [5640] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 1401484516
05/30 16:15:16.393 [5640] <mfn_PostAgentInfo>Free memory difference: 2482446336, Threshold: 0
05/30 16:15:16.393 [5640] <mfn_PostAgentInfo>Free disk space difference: 419172012032, Threshold: 0
05/30 16:15:16.393 [5640] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
05/30 16:15:16.393 [5640] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
05/30 16:15:16.393 [5640] <mfn_PostAgentInfo><?xml version='1.0' encoding='UTF-8' ?>

</AgentHIInfo>

</SSAHostInfo>

</SSAInfo>

]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="28486330C0A8011000B250E7B2D935FE" ComputerID="09EB5CC6C0A8011000B250E77205E176" HardwareKey="D8087A96FF223B93F8D326E0D38348F9" GroupID="C63C4A27C0A80110013A6137E6EFC65D">

</SSAHostInfo>

</SSAInfo>

]]></Data></TechID></SESAgentOpState>
05/30 16:15:16.393 [5640] ************CSN=96847
05/30 16:15:16.393 [5640] <mfn_MakePostUrl:>Request is: action=192&hostid=28486330C0A8011000B250E7B2D935FE&chk=C5C7EED12F8FCD83835EE0F79CECD0C4&ck=64EB7C7339C63D0AF54E623EE15EF307&uchk=4F94BB9AEB155B8CDEC37391C5B9298B&uck=637969E9DDF987BF3AB6D5EAFD8A0C62&ClientProductVersion=12.1.4013.4013&as=96847&cn=[hex]4A412D4354415545522D5737&lun=[hex]637461756572&udn=[hex]4A41484F5553544F4E2E4C4F43414C
05/30 16:15:16.393 [5640] <mfn_PostAgentInfo>http://192.168.1.16:8014/secars/secars.dll?h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
05/30 16:15:16.518 [5640] <mfn_PostAgentInfo>POST the total size=1492
05/30 16:15:16.518 [5640] <mfn_PostAgentInfo>Pending deployment status opstate removed from Registry!!
05/30 16:15:16.518 [5640] <mfn_PostAgentInfo>Done with return code = 200
05/30 16:15:16.518 [5640] <DoLogUpdate>===UPLOAD STAGE===
05/30 16:15:16.518 [5640] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
05/30 16:15:16.518 [5640] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
05/30 16:15:16.534 [5640] <DoLogUpdate>===PREPARE EVENT LOG STAGE===
05/30 16:15:16.534 [5640] <PrepareEventLog>initialized technology extension processing ok
05/30 16:15:16.534 [5640] <CalcEventLogIndex>Need to send Event Log Type(0) from id 1883 to 1889
05/30 16:15:16.534 [5640] <PrepareEventLog>Allow total logs to send=7
05/30 16:15:16.534 [5640] <PrepareEventLog>nSecurityRecordsTotal=0
05/30 16:15:16.534 [5640] <PrepareEventLog>nSecurityRecordsToSend=0
05/30 16:15:16.534 [5640] <PrepareEventLog>nSystemRecordsTotal=7
05/30 16:15:16.534 [5640] <PrepareEventLog>nSystemRecordsToSend=100
05/30 16:15:16.534 [5640] <PrepareEventLog>nTrafficRecordsTotal=0
05/30 16:15:16.534 [5640] <PrepareEventLog>nTrafficRecordsToSend=0
05/30 16:15:16.534 [5640] <PrepareEventLog>nRawRecordsTotal=0
05/30 16:15:16.534 [5640] <PrepareEventLog>nRawRecordsToSend=0
05/30 16:15:16.534 [5640] <PrepareEventLog>nProcessRecordsTotal=0
05/30 16:15:16.534 [5640] <PrepareEventLog>nProcessRecordsToSend=0
05/30 16:15:16.534 [5640] <PrepareEventLog>nLANSensorRecordsTotal=0
05/30 16:15:16.534 [5640] <PrepareEventLog>nLANSensorRecordsToSend=0
05/30 16:15:16.534 [5640] <PrepareEventLog>nTechExtensionRecordsTotal=0
05/30 16:15:16.534 [5640] <PrepareEventLog>nTechExtensionRecordsToSend=0
05/30 16:15:16.534 [5640] <MakeSystemLog>The size of SYSTEM event logs is 3011.
05/30 16:15:16.534 [5640] <SyLink>The size of SYSTEM event logs is 3011.
05/30 16:15:16.534 [5640] <MakeSecurityLog>Attached total 0 bytes SECURITY event logs.
05/30 16:15:16.534 [5640] <MakeTrafficLog>Attached total 0 bytes TRAFFIC event logs.
05/30 16:15:16.534 [5640] <MakeRawTrafficLog>Attached total 0 bytes RAW TRAFFIC event logs.
05/30 16:15:16.534 [5640] <MakeProcessLog>Attached total 0 bytes process event logs.
05/30 16:15:16.549 [5640] <DoLogUpdate>===COMPRESS EVENT LOG STAGE===
05/30 16:15:16.549 [5640] <DoLogUpdate>===SEND EVENT LOG STAGE===
05/30 16:15:16.549 [5640] ************CSN=96848
05/30 16:15:16.549 [5640] <mfn_MakePostUrl:>Request is: action=195&hostid=28486330C0A8011000B250E7B2D935FE&chk=C5C7EED12F8FCD83835EE0F79CECD0C4&ck=64EB7C7339C63D0AF54E623EE15EF307&uchk=4F94BB9AEB155B8CDEC37391C5B9298B&uck=637969E9DDF987BF3AB6D5EAFD8A0C62&groupid=DF32C52FC0A8011000837FAB784F6C0A&ClientProductVersion=12.1.4013.4013&as=96848&cn=[hex]4A412D4354415545522D5737&lun=[hex]637461756572&udn=[hex]4A41484F5553544F4E2E4C4F43414C
05/30 16:15:16.549 [5640] <SendEventLogToServer>http://192.168.1.16:8014/secars/secars.dll?h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
05/30 16:15:16.674 [5640] <SendEventLogToServer>eventlog-->SMS, size=830
05/30 16:15:16.674 [5640] <SendEventLogToServer>uploads the eventlog to server, size=830
05/30 16:15:16.674 [5640] <SendEventLogToServer>Query return code = 200
05/30 16:15:16.674 [5640] <SendEventLogToServer>EventLog-->SEM DONE!
05/30 16:15:16.674 [5640] <mfn_SaveTechExtensionLogSettings> check techID AVMan
05/30 16:15:16.674 [5640] <mfn_SaveTechExtensionLogSettings> check techID AtpiMan
05/30 16:15:16.674 [5640] <mfn_SaveTechExtensionLogSettings> check techID BashMan
05/30 16:15:16.674 [5640] <mfn_SaveTechExtensionLogSettings> check techID CidsMan
05/30 16:15:16.674 [5640] <mfn_SaveTechExtensionLogSettings> check techID CommonMan
05/30 16:15:16.674 [5640] <mfn_SaveTechExtensionLogSettings> check techID DevMan
05/30 16:15:16.674 [5640] <mfn_SaveTechExtensionLogSettings> check techID GUP
05/30 16:15:16.674 [5640] <mfn_SaveTechExtensionLogSettings> check techID LUMan
05/30 16:15:16.674 [5640] <mfn_SaveTechExtensionLogSettings> check techID LocalRep
05/30 16:15:16.674 [5640] <mfn_SaveTechExtensionLogSettings> check techID NacMan
05/30 16:15:16.674 [5640] <mfn_SaveTechExtensionLogSettings> check techID RebootMgrMan
05/30 16:15:16.674 [5640] <mfn_SaveTechExtensionLogSettings> check techID RepMgtMan
05/30 16:15:16.674 [5640] <mfn_SaveTechExtensionLogSettings> check techID SfMan
05/30 16:15:16.674 [5640] <mfn_SaveTechExtensionLogSettings> check techID SubmissionsMan
05/30 16:15:16.674 [5640] <PostEvent>going to post event=EVENT_SERVER_EVENT_LOG_SENT
05/30 16:15:16.674 [5640] <PostEvent>done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0
05/30 16:15:16.674 [5640] <mfn_PostApplication>===SEND EVENT_SERVER_REQUIRES_CLIENT_APPLEARNING ===
05/30 16:15:16.674 [5640] <PostEvent>going to post event=Unknown Event=54
05/30 16:15:16.674 [5640] <PostEvent>done post event=Unknown Event=54, return=0
05/30 16:15:16.674 [5640] <mfn_PostApplication> there are no new applications to report!!
05/30 16:15:16.674 [5640] <IndexHeartbeatProc>Communication Mode=0(Push Mode)
05/30 16:15:16.674 [5640] <IndexHeartbeatProc>Updating the Status - before push
05/30 16:15:16.674 [5640] <IndexHeartbeatProc>Enter Push Session
05/30 16:15:16.674 [5640] <IndexHeartbeatProc>Setting the session timeout on Profile Session (for MaintainPushConnection) to 350000
05/30 16:15:16.674 [5640] <MaintainPushConnection:>Push Connecton!
05/30 16:15:17.189 [5640] ************CSN=96849
05/30 16:15:17.189 [5640] <mfn_MakeGetPushUrl:>Request is: action=128&hostid=28486330C0A8011000B250E7B2D935FE&chk=C5C7EED12F8FCD83835EE0F79CECD0C4&ck=64EB7C7339C63D0AF54E623EE15EF307&uchk=4F94BB9AEB155B8CDEC37391C5B9298B&uck=637969E9DDF987BF3AB6D5EAFD8A0C62&groupid=DF32C52FC0A8011000837FAB784F6C0A&ClientProductVersion=12.1.4013.4013&mode=0&as=96849
05/30 16:15:17.189 [5640] <MaintainPushConnection:>http://192.168.1.16:8014/secars/secars.dll?h=4E291398DC543EBAA7D723386D8A3675C3EB8976427AB43260D15035D84CF13CF7F66EA5E113521CA1CD5DA7259069CBA1C262746E607E0717C743D2656B754CDDB825BB115A3A36E0ADE0C4D492A6181BE8E1C4C61F77EC2ED67128F2F040DD3CF79AAEC4F046DBB9A20EB3A125345B37BF6E3E0689F2AAD822B24709FF6101CACC92232A10D9249C3B33C63D4A3C50627A9170C56E216AF7B3476B18698483358BB8339CD5E2634842DE1659285EFBEE21D6D436EFFBFBA0369E34C3387FB27E551F4098385BE138722803073F2DF143B94A3477D8CA086F87A5B57EA94797B8523FD7E146B7BAEDED9A3F01B5FC309FD7D2FF4224C52116962304954D7F730CC64224D4AC7DFB0CF3116CC49F0918F70AD980E7163E7AC23B205B8681D11B9140CF75FACF519ED14CE39659783D22
05/30 16:15:19.919 [416] SyLinkCreateConfig => Created instance: 00000000055072F0
05/30 16:15:19.919 [416] Importing ConfigObject: 00000000030BFEE0 into: 00000000055072F0

↧

Deleting clients from SEPM

May 29, 2014, 8:06 am

≫ Next: Server 2008 R2 standard - rollback of SEP12RU4MP1

≪ Previous: some sep 12 clients not updating

I need a solution

Good Morning - I have a few PCs that are listed in my SEPM - but they are not anywhere listed in our Active Directory. If I delete the PCs from the SEPM - are they considered GONE??? or will they still get def updates because they have SEP on them? how does that work?

↧

Server 2008 R2 standard - rollback of SEP12RU4MP1

May 30, 2014, 6:21 am

≫ Next: Symantec Endpoint Protection Version

≪ Previous: Deleting clients from SEPM

I need a solution

Hi all, Struggling to get SEP12RU4MP1 installed on server 2008 r2 standard...any ideas?

=== Verbose logging started: 2014/05/30 14:34:00 Build type: SHIP UNICODE 5.00.7601.00 Calling process: C:\Windows\system32\msiexec.exe ===
MSI (c) (64:88) [14:34:00:853]: Resetting cached policy values
MSI (c) (64:88) [14:34:00:853]: Machine policy value 'Debug' is 0
MSI (c) (64:88) [14:34:00:853]: ******* RunEngine:
******* Product: C:\Users\SepManager\AppData\Local\Temp\2\Symantec\Sep64.msi
******* Action:
******* CommandLine: **********
MSI (c) (64:88) [14:34:00:853]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (64:88) [14:34:00:853]: Grabbed execution mutex.
MSI (c) (64:88) [14:34:00:869]: Cloaking enabled.
MSI (c) (64:88) [14:34:00:869]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (64:88) [14:34:00:869]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (18:14) [14:34:00:869]: Running installation inside multi-package transaction C:\Users\SepManager\AppData\Local\Temp\2\Symantec\Sep64.msi
MSI (s) (18:14) [14:34:00:869]: Grabbed execution mutex.
MSI (s) (18:B0) [14:34:00:869]: Resetting cached policy values
MSI (s) (18:B0) [14:34:00:869]: Machine policy value 'Debug' is 0
MSI (s) (18:B0) [14:34:00:869]: ******* RunEngine:
******* Product: C:\Users\SepManager\AppData\Local\Temp\2\Symantec\Sep64.msi
******* Action:
******* CommandLine: **********
MSI (s) (18:B0) [14:34:00:869]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (18:B0) [14:34:00:884]: SRSetRestorePoint skipped for this transaction.
MSI (s) (18:B0) [14:34:00:900]: File will have security applied from OpCode.
MSI (s) (18:B0) [14:34:00:916]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\Users\SepManager\AppData\Local\Temp\2\Symantec\Sep64.msi' against software restriction policy
MSI (s) (18:B0) [14:34:00:916]: SOFTWARE RESTRICTION POLICY: C:\Users\SepManager\AppData\Local\Temp\2\Symantec\Sep64.msi has a digital signature
MSI (s) (18:B0) [14:34:00:978]: SOFTWARE RESTRICTION POLICY: C:\Users\SepManager\AppData\Local\Temp\2\Symantec\Sep64.msi is permitted to run at the 'unrestricted' authorization level.
MSI (s) (18:B0) [14:34:00:978]: End dialog not enabled
MSI (s) (18:B0) [14:34:00:978]: Original package ==> C:\Users\SepManager\AppData\Local\Temp\2\Symantec\Sep64.msi
MSI (s) (18:B0) [14:34:00:978]: Package we're running from ==> C:\Windows\Installer\2c00e.msi
MSI (s) (18:B0) [14:34:00:994]: APPCOMPAT: Compatibility mode property overrides found.
MSI (s) (18:B0) [14:34:00:994]: APPCOMPAT: looking for appcompat database entry with ProductCode '{60171618-BEB9-4E89-AA7B-43AD32A3EC05}'.
MSI (s) (18:B0) [14:34:00:994]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (18:B0) [14:34:00:994]: MSCOREE not loaded loading copy from system32
MSI (s) (18:B0) [14:34:00:994]: Machine policy value 'TransformsSecure' is 1
MSI (s) (18:B0) [14:34:00:994]: Machine policy value 'DisablePatch' is 0
MSI (s) (18:B0) [14:34:00:994]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (18:B0) [14:34:00:994]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (18:B0) [14:34:00:994]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (18:B0) [14:34:00:994]: APPCOMPAT: looking for appcompat database entry with ProductCode '{60171618-BEB9-4E89-AA7B-43AD32A3EC05}'.
MSI (s) (18:B0) [14:34:00:994]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (18:B0) [14:34:00:994]: Transforms are not secure.
MSI (s) (18:B0) [14:34:00:994]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Users\SEPMAN~1\AppData\Local\Temp\SEP_INST.LOG'.
MSI (s) (18:B0) [14:34:00:994]: Command Line: SRCLICFILE=EE CURRENTDIRECTORY=C:\Users\SEPMAN~1\AppData\Local\Temp\2\Symantec CLIENTUILEVEL=3 CLIENTPROCESSID=1380
MSI (s) (18:B0) [14:34:00:994]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{5A00B965-9FFB-435F-827F-113C7FC34FA9}'.
MSI (s) (18:B0) [14:34:00:994]: Product Code passed to Engine.Initialize: ''
MSI (s) (18:B0) [14:34:00:994]: Product Code from property table before transforms: '{60171618-BEB9-4E89-AA7B-43AD32A3EC05}'
MSI (s) (18:B0) [14:34:00:994]: Product Code from property table after transforms: '{60171618-BEB9-4E89-AA7B-43AD32A3EC05}'
MSI (s) (18:B0) [14:34:00:994]: Product not registered: beginning first-time install
MSI (s) (18:B0) [14:34:00:994]: Product {60171618-BEB9-4E89-AA7B-43AD32A3EC05} is not managed.
MSI (s) (18:B0) [14:34:00:994]: MSI_LUA: Credential prompt not required, user is an admin
MSI (s) (18:B0) [14:34:00:994]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI (s) (18:B0) [14:34:00:994]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (18:B0) [14:34:00:994]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (18:B0) [14:34:00:994]: Adding new sources is allowed.
MSI (s) (18:B0) [14:34:00:994]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI (s) (18:B0) [14:34:00:994]: Package name extracted from package path: 'Sep64.msi'
MSI (s) (18:B0) [14:34:00:994]: Package to be registered: 'Sep64.msi'
MSI (s) (18:B0) [14:34:00:994]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (s) (18:B0) [14:34:00:994]: Machine policy value 'DisableMsi' is 1
MSI (s) (18:B0) [14:34:00:994]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (18:B0) [14:34:00:994]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (18:B0) [14:34:00:994]: Product installation will be elevated because user is admin and product is being installed per-machine.
MSI (s) (18:B0) [14:34:00:994]: Running product '{60171618-BEB9-4E89-AA7B-43AD32A3EC05}' with elevated privileges: Product is assigned.
MSI (s) (18:B0) [14:34:00:994]: PROPERTY CHANGE: Adding SRCLICFILE property. Its value is 'EE'.
MSI (s) (18:B0) [14:34:00:994]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\Users\SEPMAN~1\AppData\Local\Temp\2\Symantec'.
MSI (s) (18:B0) [14:34:00:994]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
MSI (s) (18:B0) [14:34:00:994]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '1380'.
MSI (s) (18:B0) [14:34:00:994]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0
MSI (s) (18:B0) [14:34:00:994]: RESTART MANAGER: Disabled by MSIRESTARTMANAGERCONTROL property; Windows Installer will use the built-in FilesInUse functionality.
MSI (s) (18:B0) [14:34:00:994]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Its value is '1'.
MSI (s) (18:B0) [14:34:00:994]: TRANSFORMS property is now:
MSI (s) (18:B0) [14:34:00:994]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
MSI (s) (18:B0) [14:34:00:994]: SHELL32::SHGetFolderPath returned: C:\Users\SepManager\AppData\Roaming
MSI (s) (18:B0) [14:34:00:994]: SHELL32::SHGetFolderPath returned: C:\Users\SepManager\Favorites
MSI (s) (18:B0) [14:34:01:009]: SHELL32::SHGetFolderPath returned: C:\Users\SepManager\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (s) (18:B0) [14:34:01:009]: SHELL32::SHGetFolderPath returned: C:\Users\SepManager\Documents
MSI (s) (18:B0) [14:34:01:009]: SHELL32::SHGetFolderPath returned: C:\Users\SepManager\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (s) (18:B0) [14:34:01:009]: SHELL32::SHGetFolderPath returned: C:\Users\SepManager\AppData\Roaming\Microsoft\Windows\Recent
MSI (s) (18:B0) [14:34:01:009]: SHELL32::SHGetFolderPath returned: C:\Users\SepManager\AppData\Roaming\Microsoft\Windows\SendTo
MSI (s) (18:B0) [14:34:01:009]: SHELL32::SHGetFolderPath returned: C:\Users\SepManager\AppData\Roaming\Microsoft\Windows\Templates
MSI (s) (18:B0) [14:34:01:009]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (s) (18:B0) [14:34:01:009]: SHELL32::SHGetFolderPath returned: C:\Users\SepManager\AppData\Local
MSI (s) (18:B0) [14:34:01:009]: SHELL32::SHGetFolderPath returned: C:\Users\SepManager\Pictures
MSI (s) (18:B0) [14:34:01:009]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (18:B0) [14:34:01:009]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (18:B0) [14:34:01:009]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (s) (18:B0) [14:34:01:009]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (s) (18:B0) [14:34:01:009]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (s) (18:B0) [14:34:01:009]: SHELL32::SHGetFolderPath returned: C:\Users\SepManager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (s) (18:B0) [14:34:01:025]: SHELL32::SHGetFolderPath returned: C:\Users\SepManager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (s) (18:B0) [14:34:01:025]: SHELL32::SHGetFolderPath returned: C:\Users\SepManager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (s) (18:B0) [14:34:01:025]: SHELL32::SHGetFolderPath returned: C:\Users\SepManager\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (s) (18:B0) [14:34:01:025]: SHELL32::SHGetFolderPath returned: C:\Users\SepManager\Desktop
MSI (s) (18:B0) [14:34:01:025]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (s) (18:B0) [14:34:01:025]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (s) (18:B0) [14:34:01:025]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (s) (18:B0) [14:34:01:025]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (s) (18:B0) [14:34:01:025]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (s) (18:B0) [14:34:01:025]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (s) (18:B0) [14:34:01:025]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (18:B0) [14:34:01:025]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Windows User'.
MSI (s) (18:B0) [14:34:01:025]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (s) (18:B0) [14:34:01:025]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\2c00e.msi'.
MSI (s) (18:B0) [14:34:01:025]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\Users\SepManager\AppData\Local\Temp\2\Symantec\Sep64.msi'.
MSI (s) (18:B0) [14:34:01:025]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (s) (18:B0) [14:34:01:025]: EEUI - Disabling MsiEmbeddedUI for service because it's not a quiet/basic install
MSI (s) (18:B0) [14:34:01:025]: Note: 1: 2205 2: 3: PatchPackage
MSI (s) (18:B0) [14:34:01:025]: Machine policy value 'DisableRollback' is 0
MSI (s) (18:B0) [14:34:01:025]: User policy value 'DisableRollback' is 0
MSI (s) (18:B0) [14:34:01:025]: PROPERTY CHANGE: Adding UILevel property. Its value is '2'.
=== Logging started: 2014/05/30 14:34:01 ===
MSI (s) (18:B0) [14:34:01:025]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (s) (18:B0) [14:34:01:025]: Doing action: INSTALL
Action start 14:34:01: INSTALL.
MSI (s) (18:B0) [14:34:01:025]: Running ExecuteSequence
MSI (s) (18:B0) [14:34:01:025]: Doing action: Check32BitSupport
MSI (s) (18:CC) [14:34:01:040]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC7E0.tmp, Entrypoint: Check32BitSupport
MSI (s) (18:EC) [14:34:01:040]: Generating random cookie.
MSI (s) (18:EC) [14:34:01:040]: Created Custom Action Server with PID 5076 (0x13D4).
MSI (s) (18:AC) [14:34:01:072]: Running as a service.
MSI (s) (18:AC) [14:34:01:072]: Hello, I'm your 32bit Impersonated custom action server.
MSI (s) (18!A4) [14:34:01:165]: PROPERTY CHANGE: Adding Supports32BitDlls property. Its value is '1'.
Action start 14:34:01: Check32BitSupport.
MSI (s) (18:B0) [14:34:01:165]: Skipping action: No32BitSupportError (condition is false)
MSI (s) (18:B0) [14:34:01:165]: Doing action: FindRelatedProducts
Action ended 14:34:01: Check32BitSupport. Return value 1.
Action start 14:34:01: FindRelatedProducts.
MSI (s) (18:B0) [14:34:01:165]: Skipping action: DowngradeError (condition is false)
MSI (s) (18:B0) [14:34:01:165]: Skipping action: LegacyNortonError (condition is false)
MSI (s) (18:B0) [14:34:01:165]: Skipping action: LegacySymError (condition is false)
MSI (s) (18:B0) [14:34:01:165]: Doing action: DriverCheck
Action ended 14:34:01: FindRelatedProducts. Return value 1.
MSI (s) (18:CC) [14:34:01:165]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC86D.tmp, Entrypoint: DriverCheck
Action start 14:34:01: DriverCheck.
DriverCheck SymEvent did not open. Trying accessing via CreateFile
DriverCheck SymEvent did not open (probably doesn't exist -- this is fine) with: 2
DriverCheck SymTDI did not open. Trying accessing via CreateFile
DriverCheck SymTDI did not open (probably doesn't exist -- this is fine) with: 2
DriverCheck WPS did not open. Trying accessing via CreateFile
DriverCheck WPS did not open (probably doesn't exist -- this is fine) with: 2
MSI (s) (18:B0) [14:34:01:197]: Doing action: SetMigrateProperty
Action ended 14:34:01: DriverCheck. Return value 1.
MSI (s) (18:3C) [14:34:01:197]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC88E.tmp, Entrypoint: SetMigrateProperty
Action start 14:34:01: SetMigrateProperty.
MSI (s) (18:B0) [14:34:01:228]: Skipping action: SetIdcMultistageProperty (condition is false)
MSI (s) (18:B0) [14:34:01:228]: Skipping action: SetSNACMigratePropertyAmberPlus (condition is false)
MSI (s) (18:B0) [14:34:01:228]: Skipping action: SetSNACMigratePropertyOlder (condition is false)
MSI (s) (18:B0) [14:34:01:228]: Skipping action: SetSNACMigratePropertyPreAmber (condition is false)
MSI (s) (18:B0) [14:34:01:228]: Doing action: VerifyBFERunning
Action ended 14:34:01: SetMigrateProperty. Return value 1.
MSI (s) (18:08) [14:34:01:228]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC8AE.tmp, Entrypoint: VerifyBFERunning
Action start 14:34:01: VerifyBFERunning.
InstallUtils::CServiceUtil::isServiceRunningChecking status of service: BFE
MSI (s) (18!F0) [14:34:01:259]: PROPERTY CHANGE: Adding BFEServiceRunning property. Its value is '1'.
InstallUtils::CServiceUtil::isServiceRunningService BFE is currently running.
MSI (s) (18:B0) [14:34:01:259]: Doing action: LocateSourceDir
Action ended 14:34:01: VerifyBFERunning. Return value 1.
MSI (s) (18:A8) [14:34:01:259]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC8CE.tmp, Entrypoint: LocateSourceDir
Action start 14:34:01: LocateSourceDir.
preclientca: SourceDir=
MSI (s) (18!D0) [14:34:01:275]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'C:\Users\SepManager\AppData\Local\Temp\2\Symantec\'.
preclientca: OriginalDatabase=C:\Users\SepManager\AppData\Local\Temp\2\Symantec\Sep64.msi
MSI (s) (18:B0) [14:34:01:275]: Doing action: AppSearch
Action ended 14:34:01: LocateSourceDir. Return value 1.
Action start 14:34:01: AppSearch.
MSI (s) (18:B0) [14:34:01:290]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps 3: 2
MSI (s) (18:B0) [14:34:01:290]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps 3: 2
MSI (s) (18:B0) [14:34:01:290]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Sygate Technologies, Inc.\Sygate Personal Firewall 3: 2
MSI (s) (18:B0) [14:34:01:290]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps 3: 2
MSI (s) (18:B0) [14:34:01:290]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps 3: 2
MSI (s) (18:B0) [14:34:01:290]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\InstalledApps 3: 2
MSI (s) (18:B0) [14:34:01:290]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Symantec\Symantec Endpoint Protection\InstalledApps 3: 2
MSI (s) (18:B0) [14:34:01:290]: PROPERTY CHANGE: Adding OS_SUPPORTS_UI property. Its value is 'C:\Windows\explorer.exe'.
MSI (s) (18:B0) [14:34:01:290]: PROPERTY CHANGE: Adding IE6FOUND property. Its value is 'C:\Windows\SysWOW64\shdocvw.dll'.
MSI (s) (18:B0) [14:34:01:290]: PROPERTY CHANGE: Adding SPMXMLFOUND property. Its value is 'C:\Users\SepManager\AppData\Local\Temp\2\Symantec\SyLink.xml'.
MSI (s) (18:B0) [14:34:01:290]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\Common 3: 2
MSI (s) (18:B0) [14:34:01:290]: PROPERTY CHANGE: Adding SERDEFDATFOUND property. Its value is 'C:\Users\SepManager\AppData\Local\Temp\2\Symantec\serdef.dat'.
MSI (s) (18:B0) [14:34:01:290]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC 3: 2
MSI (s) (18:B0) [14:34:01:290]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Symantec\Symantec Endpoint Protection\VolatileInstallData 3: 2
MSI (s) (18:B0) [14:34:01:290]: PROPERTY CHANGE: Adding UNINSTALLREBOOTREQUIRED property. Its value is '1'.
MSI (s) (18:B0) [14:34:01:290]: PROPERTY CHANGE: Adding SYMRASMAN_REG13_PATH property. Its value is 'C:\Windows\System32\rastls.dll'.
MSI (s) (18:B0) [14:34:01:290]: PROPERTY CHANGE: Adding SYMRASMAN_REG13_INTERACTIVEUIPATH property. Its value is 'C:\Windows\System32\rastls.dll'.
MSI (s) (18:B0) [14:34:01:290]: PROPERTY CHANGE: Adding SYMRASMAN_REG13_CONFIGUIPATH property. Its value is 'C:\Windows\System32\rastls.dll'.
MSI (s) (18:B0) [14:34:01:290]: PROPERTY CHANGE: Adding SYMRASMAN_REG13_IDENTITYPATH property. Its value is 'C:\Windows\System32\rastls.dll'.
MSI (s) (18:B0) [14:34:01:290]: PROPERTY CHANGE: Adding SYMRASMAN_REG25_PATH property. Its value is 'C:\Windows\System32\rastls.dll'.
MSI (s) (18:B0) [14:34:01:290]: PROPERTY CHANGE: Adding SYMRASMAN_REG25_INTERACTIVEUIPATH property. Its value is 'C:\Windows\System32\rastls.dll'.
MSI (s) (18:B0) [14:34:01:290]: PROPERTY CHANGE: Adding SYMRASMAN_REG25_CONFIGUIPATH property. Its value is 'C:\Windows\System32\rastls.dll'.
MSI (s) (18:B0) [14:34:01:290]: PROPERTY CHANGE: Adding SYMRASMAN_REG25_IDENTITYPATH property. Its value is 'C:\Windows\System32\rastls.dll'.
MSI (s) (18:B0) [14:34:01:290]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Sygate Technologies, Inc.\Sygate Personal Firewall 3: 2
MSI (s) (18:B0) [14:34:01:290]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Symantec\Symantec Endpoint Protection\InstalledApps 3: 2
MSI (s) (18:B0) [14:34:01:290]: Note: 1: 1324 2: Data\Config 3: 1
MSI (s) (18:B0) [14:34:01:290]: Note: 1: 1324 2: Data\Config 3: 1
MSI (s) (18:B0) [14:34:01:306]: Note: 1: 1324 2: Data\Config 3: 1
MSI (s) (18:B0) [14:34:01:306]: Note: 1: 1324 2: Data\Config 3: 1
MSI (s) (18:B0) [14:34:01:306]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Microsoft\WinFLP\Optional Components 3: 2
MSI (s) (18:B0) [14:34:01:306]: Note: 1: 1402 2: HKEY_CLASSES_ROOT\AppID\{A79DB36D-6218-48e6-9EC9-DCBA9A39BF0F} 3: 2
MSI (s) (18:B0) [14:34:01:306]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\TSE 3: 2
MSI (s) (18:B0) [14:34:01:306]: Note: 1: 1325 2: sysferThunk.dll
MSI (s) (18:B0) [14:34:01:306]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\Software\Microsoft\Windows\CurrentVersion\App Paths\OUTLOOK.EXE 3: 2
MSI (s) (18:B0) [14:34:01:306]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\OUTLOOK.EXE 3: 2
MSI (s) (18:B0) [14:34:01:306]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\EXCHNG32.EXE 3: 2
MSI (s) (18:B0) [14:34:01:306]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\notes.exe 3: 2
MSI (s) (18:B0) [14:34:01:306]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton AntiVirus Corporate Edition 3: 2
MSI (s) (18:B0) [14:34:01:306]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7} 3: 2
MSI (s) (18:B0) [14:34:01:306]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Symantec\SymBPL\{D270A25E-8BB6-4895-8517-89B898969BBF} 3: 2
MSI (s) (18:B0) [14:34:01:306]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps 3: 2
MSI (s) (18:B0) [14:34:01:306]: PROPERTY CHANGE: Adding SDIDATFOUND property. Its value is 'C:\Users\SepManager\AppData\Local\Temp\2\Symantec\sdi.dat'.
MSI (s) (18:B0) [14:34:01:306]: Note: 1: 1325 2: sysferThunk.dll
MSI (s) (18:B0) [14:34:01:306]: PROPERTY CHANGE: Adding FOUNDSEPSLF property. Its value is 'C:\Users\SepManager\AppData\Local\Temp\2\Symantec\sep.slf'.
MSI (s) (18:B0) [14:34:01:306]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SYSTEM\CurrentControlSet\services\Teefer2 3: 2
MSI (s) (18:B0) [14:34:01:306]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE32\SOFTWARE\Symantec\Symantec Endpoint Protection\{67210CE5-A4BA-4C22-B639-1C79F566632D}\Install 3: 2
MSI (s) (18:B0) [14:34:01:306]: PROPERTY CHANGE: Adding SNACNPFOUND64 property. Its value is 'C:\Windows\system32\snacnp.dll'.
MSI (s) (18:B0) [14:34:01:306]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\SOFTWARE\WholeSecurity Inc.\Confidence Online(tm) Server 3: 2
MSI (s) (18:B0) [14:34:01:306]: Doing action: checkInstallBlocksIE
Action ended 14:34:01: AppSearch. Return value 1.
MSI (s) (18:90) [14:34:01:306]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC8FE.tmp, Entrypoint: checkInstallBlocksIE
MSI (s) (18!EC) [14:34:01:337]: PROPERTY CHANGE: Adding IdcXmlPath property. Its value is 'C:\Windows\Temp\idc.xml'.
Action start 14:34:01: checkInstallBlocksIE.
IDCCA: CMsiUtil::isActionScheduled: Unable to fetch view (Result: 259)
MSI (s) (18:B0) [14:34:01:399]: Doing action: CommunicateLaunchConditions
Action ended 14:34:01: checkInstallBlocksIE. Return value 1.
MSI (s) (18:74) [14:34:01:415]: Invoking remote custom action. DLL: C:\Windows\Installer\MSIC95C.tmp, Entrypoint: CommunicateLaunchConditions
Action start 14:34:01: CommunicateLaunchConditions.
Communicate LC: NOT Version9X=1
Communicate LC: VersionNT > 500=1
Communicate LC: NOT WINDOWSFUNDAMENTALS=1
Communicate LC: (NOT MIGRATIONPENDINGREBOOT) OR SISFAILED=1
Communicate LC: (NOT UNINSTALLREBOOTREQUIRED) OR Installed=0
Communicate LC: Symantec Endpoint Protection has detected that there are pending system changes that require a reboot. Please reboot the system and rerun the installation.
Communicate LC: calling communicate state with the following arguments:
Communicate LC: Prodversion = 12.1.4100.4126
Communicate LC: PathToSylink = C:\Users\SepManager\AppData\Local\Temp\2\Symantec\
Communicate LC: Oldversion =
Communicate LC: ReasonStr = Symantec Endpoint Protection has detected that there are pending system changes that require a reboot. Please reboot the system and rerun the installation.
Communicate LC: StatusCode = 302469124
MSI (s) (18:B0) [14:34:02:741]: Skipping action: IsAdmin (condition is false)
MSI (s) (18:B0) [14:34:02:741]: Doing action: preLaunchCond
Action ended 14:34:02: CommunicateLaunchConditions. Return value 1.
MSI (s) (18:58) [14:34:02:741]: Invoking remote custom action. DLL: C:\Windows\Installer\MSICE9B.tmp, Entrypoint: preLaunchCond
Action start 14:34:02: preLaunchCond.
MSI (s) (18!34) [14:34:02:773]: Note: 1: 2731 2: 0
IDCCA: preLaunchCond - Launch condition `4Symantec Endpoint Protection has detected that there are pending system changes that require a reboot. Please reboot the system and rerun the installation.` with condition `(NOT UNINSTALLREBOOTREQUIRED) OR Installed` failed
MSI (s) (18!34) [14:34:02:773]: Note: 1: 2731 2: 0
Unable to determine feature state: 1606
MSI (s) (18!34) [14:34:02:773]: Note: 1: 2731 2: 0
Unable to determine feature state: 1606
MSI (s) (18!34) [14:34:02:773]: Note: 1: 2731 2: 0
Unable to determine feature state: 1606
MSI (s) (18!34) [14:34:02:773]: Note: 1: 2731 2: 0
Unable to determine feature state: 1606
MSI (s) (18!34) [14:34:02:773]: Note: 1: 2731 2: 0
Unable to determine feature state: 1606
MSI (s) (18!34) [14:34:02:773]: Note: 1: 2731 2: 0
Unable to determine feature state: 1606
MSI (s) (18!34) [14:34:02:773]: Note: 1: 2731 2: 0
Unable to determine feature state: 1606
MSI (s) (18!34) [14:34:02:788]: Note: 1: 2731 2: 0
Unable to determine feature state: 1606
MSI (s) (18!34) [14:34:02:788]: Note: 1: 2731 2: 0
Unable to determine feature state: 1606
MSI (s) (18!34) [14:34:02:788]: Note: 1: 2731 2: 0
Unable to determine feature state: 1606
MSI (s) (18!34) [14:34:02:788]: Note: 1: 2731 2: 0
Unable to determine feature state: 1606
MSI (s) (18!34) [14:34:02:788]: Note: 1: 2731 2: 0
Unable to determine feature state: 1606
MSI (s) (18!34) [14:34:02:788]: Note: 1: 2732 2: 0
Unable to determine feature state: 1606
MSI (s) (18!34) [14:34:02:788]: Note: 1: 2732 2: 0
IDCCA: Unable to get target path (Result: 267)
IDCCA: Unable to get target path (Result: 267)
IDCCA: Machine ID: c75779cc5cde24f98897a6a13c4c94df42ed80
IDCCA: HttpQueryInfo: 200 OK Error: 0
IDCCA: SETI::CUploadFile::logout200 OK
MSI (s) (18:B0) [14:34:09:779]: Doing action: LaunchConditions
Action ended 14:34:09: preLaunchCond. Return value 1.
Action start 14:34:09: LaunchConditions.
MSI (s) (18:B0) [14:34:09:779]: Product: Symantec Endpoint Protection -- 4Symantec Endpoint Protection has detected that there are pending system changes that require a reboot. Please reboot the system and rerun the installation.

4Symantec Endpoint Protection has detected that there are pending system changes that require a reboot. Please reboot the system and rerun the installation.
Action ended 14:34:09: LaunchConditions. Return value 3.
Action ended 14:34:09: INSTALL. Return value 3.
Property(S): UpgradeCode = {F7BE9C8A-C2E6-470D-B703-0A1845E6FF8C}
Property(S): OS_SUPPORTS_UI = C:\Windows\explorer.exe
Property(S): IE6FOUND = C:\Windows\SysWOW64\shdocvw.dll
Property(S): SPMXMLFOUND = C:\Users\SepManager\AppData\Local\Temp\2\Symantec\SyLink.xml
Property(S): SERDEFDATFOUND = C:\Users\SepManager\AppData\Local\Temp\2\Symantec\serdef.dat
Property(S): UNINSTALLREBOOTREQUIRED = 1
Property(S): SYMRASMAN_REG13_PATH = C:\Windows\System32\rastls.dll
Property(S): SYMRASMAN_REG13_INTERACTIVEUIPATH = C:\Windows\System32\rastls.dll
Property(S): SYMRASMAN_REG13_CONFIGUIPATH = C:\Windows\System32\rastls.dll
Property(S): SYMRASMAN_REG13_IDENTITYPATH = C:\Windows\System32\rastls.dll
Property(S): SYMRASMAN_REG25_PATH = C:\Windows\System32\rastls.dll
Property(S): SYMRASMAN_REG25_INTERACTIVEUIPATH = C:\Windows\System32\rastls.dll
Property(S): SYMRASMAN_REG25_CONFIGUIPATH = C:\Windows\System32\rastls.dll
Property(S): SYMRASMAN_REG25_IDENTITYPATH = C:\Windows\System32\rastls.dll
Property(S): SDIDATFOUND = C:\Users\SepManager\AppData\Local\Temp\2\Symantec\sdi.dat
Property(S): FOUNDSEPSLF = C:\Users\SepManager\AppData\Local\Temp\2\Symantec\sep.slf
Property(S): SNACNPFOUND64 = C:\Windows\system32\snacnp.dll
Property(S): ProductName = Symantec Endpoint Protection
Property(S): ProductDisplayName = Symantec Endpoint Protection
Property(S): ProductVersion = 12.1.4100.4126
Property(S): OPTOUTREPSUBMISSION = 0
Property(S): ENABLEAUTOPROTECT = 1
Property(S): DISABLEDEFENDER = 1
Property(S): RUNLIVEUPDATE = 1
Property(S): IDCENABLE = 1
Property(S): VersionNT64 = 601
Property(S): Managed_Client_Type = Unmanaged
Property(S): SetupType = Typical
Property(S): _IsSetupTypeMin = Typical
Property(S): SBE_Feature_Set = Typical
Property(S): AgreeToLicense = No
Property(S): _IsMaintenance = Change
Property(S): RestartManagerOption = CloseRestart
Property(S): SMSName = SepMasterService
Property(S): SMSDescription = Symantec Endpoint Protection
Property(S): InUISequence = 0
Property(S): REBOOT = ReallySuppress
Property(S): System64Folder = C:\Windows\system32\
Property(S): ProgramFilesFolder = C:\Program Files (x86)\
Property(S): WindowsFolder = C:\Windows\
Property(S): CommonFilesFolder = C:\Program Files (x86)\Common Files\
Property(S): SourceDir = C:\Users\SepManager\AppData\Local\Temp\2\Symantec\
Property(S): CommonAppDataFolder = C:\ProgramData\
Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(S): DesktopFolder = C:\Users\Public\Desktop\
Property(S): Manufacturer = Symantec Corporation
Property(S): ProductCode = {60171618-BEB9-4E89-AA7B-43AD32A3EC05}
Property(S): ProductLanguage = 1033
Property(S): ALLUSERS = 1
Property(S): APPTYPE = 105
Property(S): LUMoniker = {A8BA6A8E-8DB4-4575-8C7B-13CAF85B70AB}
Property(S): ARPSYSTEMCOMPONENT = 1
Property(S): INSTALLLEVEL = 100
Property(S): MSIENFORCEUPGRADECOMPONENTRULES = 1
Property(S): IDCDATASERVER = tses.symantec.com
Property(S): IDCDATALOC = /incoming
Property(S): IDCDEPLOYMENT = Local
Property(S): IDCEXTRAINFO = 0
Property(S): SISUSETRANSACTIONS = 1
Property(S): MAXMIGRATIONDELAY = 60
Property(S): MIGRATIONDELAY = 30
Property(S): MsiLogging = voicewarmupx
Property(S): MSIRESTARTMANAGERCONTROL = Disable
Property(S): SMSLongDescription = Provides malware and threat protection for Symantec Endpoint Protection
Property(S): SymMigrationRebootMessage = To provide complete protection, Symantec Endpoint Protection requires this computer to restart.
Property(S): SymRebootAtEndMessage = To provide complete protection, Symantec Endpoint Protection requires this computer to restart.
Property(S): InstallCompleteMessage = The installation has completed successfully
Property(S): ShowServiceProgressMessage = Executing install script via service
Property(S): ShowServiceProgress_RBMessage = Executing rollback script via service
Property(S): SiloGUID = {67210CE5-A4BA-4C22-B639-1C79F566632D}
Property(S): SILO_REGHIVE = SOFTWARE\Symantec\Symantec Endpoint Protection
Property(S): HIGHCONTRAST = 0
Property(S): SYM_MAJOR_UPGRADE = 0
Property(S): SEPLicprop = SB
Property(S): SEPLicpropReg = sepsb
Property(S): SYMLICENSETYPE = 0
Property(S): SYMLICENSETYPESTRING = sepe
Property(S): MIGLICENSETYPE = 0
Property(S): LOADEDDRIVERSFOUND = 0
Property(S): RESOLVEFEATURES = 0
Property(S): InstallingToReparse = 0
Property(S): SYMCOMPRESSFOLDERS = 1
Property(S): VMWAREDETECTED = 0
Property(S): ValidInstallDir = 0
Property(S): CACHEINSTALL = 1
Property(S): MIGRATESETTINGS = 1
Property(S): CMC_PRODUCT_BUILD = #4126
Property(S): CMC_PRODUCT_VERSION = 12.1
Property(S): CACHE_INSTALLER = 1
Property(S): ADDSTARTMENUICON = 1
Property(S): ErrorDialog = SetupError
Property(S): ApplicationUsers = AllUsers
Property(S): DefaultUIFont = Tahoma8
Property(S): ProgressType0 = install
Property(S): ProgressType1 = Installing
Property(S): ProgressType2 = installed
Property(S): ProgressType3 = installs
Property(S): INSTALLSYMELAM = 1
Property(S): LibSep64 = 1
Property(S): SysPlantStartType = disabled
Property(S): LibSepCommon = 1
Property(S): HITYPE = 0
Property(S): LOCATIONSENSOR = 0
Property(S): REVERSEDNS = 0
Property(S): WSCAVALERT = 1
Property(S): WSCAVUPTODATE = 7
Property(S): WSCCONTROL = 0
Property(S): LibSnac64 = 1
Property(S): ForeFrontSupportProp = http://service1.symantec.com/SUPPORT/ent-security....
Property(S): LaunchBrowserProp = Rundll32.Exe url.Dll,FileProtocolHandler
Property(S): Lang = 1033
Property(S): LiveUpdateVars = 1
Property(S): SecureCustomProperties = ADDLOCAL;ADDSTARTMENUICON;AMBERPLUSFOUND;AMBERSNACPLUSFOUND;APPDATAINSTALL;APPDATAINSTALLLOGS;APPDATAINSTALLSCRIPTS;APPLOGS;APTEMP;AVLOGS;BADPATTS;CACHE_INSTALLER;CACHED_INSTALLS;CACHEINSTALL;CMC_PRODUCT_BUILD;CMC_PRODUCT_VERSION;COMPANYNAME;CONFIGDIR;CONTENTCACHE;CONTENTMIGRATION;DB;DECTEMP;DEFENDERFOUND;DISABLEDEFENDER;ENABLEAUTOPROTECT;EXCHANGEFOUND;FEATURESTATEDIR;FOREFRONEXCFOUND;FOREFRONTTMGFOUND;FOUNDBROWSERPROTECTIONLITE;FOUNDLIVEUPDTHST;FOUNDSEPSLF;FOUNDSETTINGSHOSTSLIVEUPDATE;FOUNDSNACSLF;HELP;HITYPE;I2_LDVP.VDB;IDCDATALOC;IDCDATASERVER;IDCDEPLOYMENT;IDCENABLE;IDCEXTRAINFO;IE6FOUND;INSTALLEDPRODUCTTYPE;INSTALLSCRIPTS;INSTALLSYMELAM;JAGUARSNACPLUSFOUND;LANG1033;LEGACYSEA_NM;LEGACYSEA_NM1;LEGACYSEA_NM2;LOADEDDRIVERSFOUND;LOCATIONSENSOR;MAXMIGRATIONDELAY;MIGLICENSETYPE;MIGRATESETTINGS;MIGRATIONDELAY;MIGRATIONPENDINGREBOOT;MSIRESTARTMANAGERCONTROL;NEWERFOUND;NEWERSNACFOUND;NORTONAV;NORTONAVPRO;NORTONFOUND;NOTESFOUND;OLDAPPDATADIR;OLDERFOUND;OLDPRODUCTVERSION;OLDSILOFOUND;OPTOUTREPSUBMISSION;OS_SUPPORTS_UI;OUTLOOKFOUND;PENDINGMODULEREMOVAL;PERSISTEDDATA;PREAMBERFOUND;PREAMBERSNACFOUND;PREHAMLETFOUND;PRODUCTINSTALLDIR;PRODUCTINSTALLDIRINSETAID;QUARANTINE;REINSTALL;REMOVE;RES;RESOLVEFEATURES;REVERSEDNS;ROOTDRIVE;RUNLIVEUPDATE;SAVCORP7XFOUND;SAVFOUND;SAVMIGINSTDIR;SAVSMIGFOLDER;SCSMIGINSTDIR;SDIDATFOUND;SEAMIGINSTDIR;SEPMIGINSTDIR;SERDEFDATFOUND;SILO_REGHIVE;SISFAILED;SISUSETRANSACTIONS;SMCLU;SNACFOUND;SNACMIGINSTDIR;SNACNPFOUND32;SNACNPFOUND64;SOURCEDIR;SPA51BLOCK;SPAFOUND;SPMXMLFOUND;SRCLICFILE;STATEDIR;STATICDATA;SYLINKSRCDIR;SYM_MAJOR_UPGRADE;SYMCOMPRESSFOLDERS;SYMFORCEFAIL;SYMFORCEFAILPHASE;SYMLICENSETYPE;SYMLICENSETYPESTRING;SYMRASMAN_REG13_CONFIGUIPATH;SYMRASMAN_REG13_IDENTITYPATH;SYMRASMAN_REG13_INTERACTIVEUIPATH;SYMRASMAN_REG13_PATH;SYMRASMAN_REG25_CONFIGUIPATH;SYMRASMAN_REG25_IDENTITYPATH;SYMRASMAN_REG25_INTERACTIVEUIPATH;SYMRASMAN_REG25_PATH;SYMREBOOT;SYMSRCDIR;SYMSTARTMENUDIR;SYSFERFOUND32;SYSFERFOUND64;SYSFERTHUNKFOUND32;SYSFERTHUNKFOUND64;TARGETDIR;TEEFERFOUND;TEEFERVISTA;TEEFERWIN8;TEEFERXP;TPAR;UNINSTALLREBOOTREQUIRED;USEDCUSTOMINSTALL;USERNAME;VC8B1416CHECK;VC8B42CHECK;VC8B762CHECK;VMWAREDETECTED;WINDOWSFIREWALLSTATE;WSCAVALERT;WSCAVUPTODATE;WSCCONTROL;WSCONFONLINE;XFER;XFER_TMP
Property(S): MsiLogFileLocation = C:\Users\SEPMAN~1\AppData\Local\Temp\SEP_INST.LOG
Property(S): PackageCode = {5A00B965-9FFB-435F-827F-113C7FC34FA9}
Property(S): ProductState = -1
Property(S): PackagecodeChanging = 1
Property(S): SRCLICFILE = EE
Property(S): CURRENTDIRECTORY = C:\Users\SEPMAN~1\AppData\Local\Temp\2\Symantec
Property(S): CLIENTUILEVEL = 3
Property(S): CLIENTPROCESSID = 1380
Property(S): VersionDatabase = 200
Property(S): MsiSystemRebootPending = 1
Property(S): VersionMsi = 5.00
Property(S): VersionNT = 601
Property(S): WindowsBuild = 7601
Property(S): ServicePackLevel = 1
Property(S): ServicePackLevelMinor = 0
Property(S): MsiNTProductType = 3
Property(S): WindowsVolume = C:\
Property(S): SystemFolder = C:\Windows\SysWOW64\
Property(S): RemoteAdminTS = 1
Property(S): TempFolder = C:\Users\SEPMAN~1\AppData\Local\Temp\
Property(S): ProgramFiles64Folder = C:\Program Files\
Property(S): CommonFiles64Folder = C:\Program Files\Common Files\
Property(S): AppDataFolder = C:\Users\SepManager\AppData\Roaming\
Property(S): FavoritesFolder = C:\Users\SepManager\Favorites\
Property(S): NetHoodFolder = C:\Users\SepManager\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(S): PersonalFolder = C:\Users\SepManager\Documents\
Property(S): PrintHoodFolder = C:\Users\SepManager\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(S): RecentFolder = C:\Users\SepManager\AppData\Roaming\Microsoft\Windows\Recent\
Property(S): SendToFolder = C:\Users\SepManager\AppData\Roaming\Microsoft\Windows\SendTo\
Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(S): LocalAppDataFolder = C:\Users\SepManager\AppData\Local\
Property(S): MyPicturesFolder = C:\Users\SepManager\Pictures\
Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(S): FontsFolder = C:\Windows\Fonts\
Property(S): GPTSupport = 1
Property(S): OLEAdvtSupport = 1
Property(S): ShellAdvtSupport = 1
Property(S): MsiAMD64 = 6
Property(S): Msix64 = 6
Property(S): Intel = 6
Property(S): PhysicalMemory = 16371
Property(S): VirtualMemory = 38083
Property(S): AdminUser = 1
Property(S): MsiTrueAdminUser = 1
Property(S): LogonUser = SepManager
Property(S): UserSID = S-1-5-21-507921405-287218729-1801674531-15167
Property(S): UserLanguageID = 7177
Property(S): ComputerName = SWSEP0001HQ
Property(S): SystemLanguageID = 7177
Property(S): ScreenX = 1024
Property(S): ScreenY = 768
Property(S): CaptionHeight = 19
Property(S): BorderTop = 1
Property(S): BorderSide = 1
Property(S): TextHeight = 16
Property(S): TextInternalLeading = 3
Property(S): ColorBits = 32
Property(S): TTCSupport = 1
Property(S): Time = 14:34:09
Property(S): Date = 2014/05/30
Property(S): MsiNetAssemblySupport = 2.0.50727.4927
Property(S): MsiWin32AssemblySupport = 6.1.7601.17514
Property(S): RedirectedDllSupport = 2
Property(S): MsiRunningElevated = 1
Property(S): Privileged = 1
Property(S): USERNAME = Windows User
Property(S): DATABASE = C:\Windows\Installer\2c00e.msi
Property(S): OriginalDatabase = C:\Users\SepManager\AppData\Local\Temp\2\Symantec\Sep64.msi
Property(S): UILevel = 2
Property(S): ACTION = INSTALL
Property(S): Supports32BitDlls = 1
Property(S): BFEServiceRunning = 1
Property(S): IdcXmlPath = C:\Windows\Temp\idc.xml
MSI (s) (18:B0) [14:34:09:794]: Note: 1: 1708
MSI (s) (18:B0) [14:34:09:794]: Product: Symantec Endpoint Protection -- Installation operation failed.

MSI (s) (18:B0) [14:34:09:794]: Windows Installer installed the product. Product Name: Symantec Endpoint Protection. Product Version: 12.1.4100.4126. Product Language: 1033. Manufacturer: Symantec Corporation. Installation success or error status: 1603.

MSI (s) (18:B0) [14:34:09:810]: Deferring clean up of packages/files, if any exist
MSI (s) (18:B0) [14:34:09:810]: MainEngineThread is returning 1603
MSI (s) (18:14) [14:34:09:810]: No System Restore sequence number for this installation.
=== Logging stopped: 2014/05/30 14:34:09 ===
MSI (s) (18:14) [14:34:09:810]: User policy value 'DisableRollback' is 0
MSI (s) (18:14) [14:34:09:810]: Machine policy value 'DisableRollback' is 0
MSI (s) (18:14) [14:34:09:810]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (18:14) [14:34:09:810]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (18:14) [14:34:09:810]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (18:14) [14:34:09:810]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2
MSI (s) (18:14) [14:34:09:810]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2
MSI (s) (18:14) [14:34:09:810]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (18:14) [14:34:09:810]: Restoring environment variables
MSI (s) (18:14) [14:34:09:810]: Destroying RemoteAPI object.
MSI (s) (18:EC) [14:34:09:810]: Custom Action Manager thread ending.
MSI (c) (64:88) [14:34:09:810]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (64:88) [14:34:09:810]: MainEngineThread is returning 1603
=== Verbose logging stopped: 2014/05/30 14:34:09 ===

↧

Symantec Endpoint Protection Version

April 13, 2014, 11:38 pm

≫ Next: remove the antivirus

≪ Previous: Server 2008 R2 standard - rollback of SEP12RU4MP1

I need a solution

Hi Guys,

What is the latest version of SEPM?

currently iam using 12.1 RU4..

1400046418

↧