Quantcast
Channel: Symantec Connect - Products - Discussions
Viewing all 12029 articles
Browse latest View live

NetScan.exe virus

$
0
0
I need a solution

Bonjour; 

j'ai le Symantec Endpoint protection Manager 11.6 "solution complète d'entreprise", (le Serveur de gestion , une console de gestion ,  les clients installet et le serveur de mise à jours LUA), les clients sont à jour, et j'ai aucun problème de distribution ou de téléchargement de la mise à jour

Depuis quelque jours , on a trouver un virus netscan.exe sur le bureau des machines des  utilisateurs , mais le problème que le Symantec n'a rien détécté , et le virus se propague dans d'autre machines clients 

S.V.P , y'a t'il des outils pour supprimer ce virus , 

cordialement; 

 

 


sepm 12.1.2015 with sep client 11.0.7

$
0
0
I need a solution

i have upgraded the version in 12.1.2015 on clients and server, some system i don't not need to upgrade because of system configuration.

will these clients be manage by symantec manager 12.1.2015?

Cannot install SAV for Linux 1.0.14x on Ubuntu 12.04.2 x64 (kernel 3.5x)

$
0
0
I need a solution

Hello all

 

I'm trying to install SAV for Linux 1.0.14-13 on an Ubuntu 12.04.2 x64 (kernel 3.5.0-28-generic-x86_64) desktop computer.
I have read that although SAV for Linux 1.0.14 supports Ubuntu 12.04, it's only for the 3.2x kernel so I should compile my own autoprotect modules for 3.5.
I have done so, but cannot restart the SAV rtvscand service afterwards.

Here is what I have been doing:

Prerequisite steps:
Sun / Oracle Java 1.7 installed
sudo apt-get install build-essential
sudo apt-get install linux-headers-$(uname -r) build-essential

Installing SAV:
Extract the SAV installer, navigate to the deb folder and type:

sudo dpkg -i sav-*.amd64.deb savap-*.amd64.deb savjlu-*.amd64.deb savui-*.amd64.deb

This returns the following errors during installation (trimmed to show relevant info):

Unpacking savui (from savui-1.0.14-13.amd64.deb) ...
Setting up sav (1.0.14-13) ...
/etc/init.d/symcfgd: line 154: /opt/Symantec/symantec_antivirus/symcfgd: No such file or directory
/etc/init.d/rtvscand: line 151: /opt/Symantec/symantec_antivirus/rtvscand: No such file or directory
invoke-rc.d: initscript symcfgd, action "start" failed.
/etc/init.d/rtvscand: line 151: /opt/Symantec/symantec_antivirus/rtvscand: No such file or directory
/etc/init.d/symcfgd: line 154: /opt/Symantec/symantec_antivirus/symcfgd: No such file or directory
/etc/init.d/symcfgd: line 154: /opt/Symantec/symantec_antivirus/symcfgd: No such file or directory
/etc/init.d/rtvscand: line 151: /opt/Symantec/symantec_antivirus/rtvscand: No such file or directory
invoke-rc.d: initscript rtvscand, action "start" failed.
Setting up savap (1.0.14-13) ...
symap: not currently loaded
symev: unable to load kernel support module (UNSUPPORTED-OS-ub-ST-12-3.5.0-28-generic-x86_64)
invoke-rc.d: initscript autoprotect, action "restart" failed.

I see an error related to teh kernel I am running (3.5x) so I follow the published instructions on how to successfully compile my own autoprotect modules for kernel 3.5:

Compiling autoprotect modules for kernel 3.5x:

tar xvzf ap-kernelmodule-1.0.14-13.tar.gz
cd ap-kernelmodule-1.0.14-13
sudo ./build.sh --kernel-dir /usr/src/linux-headers-$(uname -r)

and here are the results for that (trimmed down to show relevant info):
 

Kernel release is not set, build the kernel modules for the current kernel release(3.5.0-28-generic)
/home/ubuntuadmin/Downloads/Ubuntu/sav/ap-kernelmodule-1.0.14-13/symev/symev.c: In function ‘symev_read_proc_symev’:
/home/ubuntuadmin/Downloads/Ubuntu/sav/ap-kernelmodule-1.0.14-13/symev/symev.c:431:9: warning: format ‘%d’ expects argument of type ‘int’, but argument 9 has type ‘long unsigned int’ [-Wformat]

/symap-custom-3.5.0-28-generic-x86_64.o
  Building modules, stage 2.
  MODPOST 1 modules
  CC      /home/ubuntuadmin/Downloads/Ubuntu/sav/ap-kernelmodule-1.0.14-13/symap/symap-custom-3.5.0-28-generic-x86_64.mod.o
  LD [M]  /home/ubuntuadmin/Downloads/Ubuntu/sav/ap-kernelmodule-1.0.14-13/symap/symap-custom-3.5.0-28-generic-x86_64.ko
make[1]: Leaving directory `/usr/src/linux-headers-3.5.0-28-generic'
cp symap-custom-3.5.0-28-generic-x86_64.ko ../bin.ira/symap-custom-3.5.0-28-generic-x86_64.ko
~/Downloads/Ubuntu/sav/ap-kernelmodule-1.0.14-13

Congratulations, build was successful!

 

I move the newly-compiled autoprotect modules to their correct folders:

sudo mv * /opt/Symantec/autoprotect/



Starting SAV services:   

I start the autoprotect service, which seems to start OK:

sudo /etc/init.d/autoprotect restart
Stopping AP: symap: not currently loaded
Starting AP: symev: loaded (symev-custom-3.5.0-28-generic-x86_64.ko)
symap: loaded (symap-custom-3.5.0-28-generic-x86_64.ko)
Setting major=250 from /proc/symap



Now I attempt to start the rtvscand service, which fails:

sudo /etc/init.d/rtvscand restart

Stopping rtvscand:                                                   failed
/etc/init.d/rtvscand: line 151: /opt/Symantec/symantec_antivirus/rtvscand: No such file or directory
/etc/init.d/symcfgd: line 154: /opt/Symantec/symantec_antivirus/symcfgd: No such file or directory
/etc/init.d/symcfgd: line 154: /opt/Symantec/symantec_antivirus/symcfgd: No such file or directory
/etc/init.d/rtvscand: line 151: /opt/Symantec/symantec_antivirus/rtvscand: No such file or directory
Starting symcfgd:                                                    failed

 

And then I'm stuck. The error message above mentions missing files in /opt/Symantec/symantec_antivirus/.

I've checked and those files are there. Restarting the PC doesn't fix the problem and I think I've followed the correct procedure to install.

Any advice?  Thank you

 

Weird problems in Windows 2012 SEPM installation

$
0
0
I need a solution

I have 2 issues regarding my Symantec Endpoint Protection 12.1.2 management server running on Windows 2012 server.

  1. About twice a week I have to restart the "Symanect Endpoint protection Manager" service and the "Symanect Endpoint protection Manager Webserver" service on the server in order for users to logon to the SEPM management console.  Otherwise it just hangs on a progress bar after you enter the credentials.  Restarting the server also resolves this.
  2. When I open the SEP Management Console (primarily from the java-based console), the majority of my servers show as OFFLINE.  Sometimes after waiting a couple minutes, they will change to ONLINE.  I have applied the following fix but it didn't resolve the issue.  This isn't as big an issue as the first item I listed. 

http://www.symantec.com/business/support/index?pag...

Thanks.

unexpected error

$
0
0
I need a solution

For the past month or so, I have been getting SEPM alert emails. Everything seems to be working fine, but anyone know the cause of these emails?

An unexpected exception has occurred

Unexpected server error.

An unexpected exception has occurred

Unexpected server error.

 

 

Event type:
Event description:
Error message:
Error code:
Stack trace:

 

SEP clients on Main computer OS and VM instance

$
0
0
I need a solution

If this has already been asked and answered I couldn't find it.

My question is: What is the best practice for SEP clients when it comes to having a Desktop with a VM instance running on it? The Desktop OS has a SEP client installed. Should the VM instance also have a SEP client installed? If you install a SEP client on the VM instance. Does that count toward your licenses?

Symantec Embedded Database always stopped...

$
0
0
I need a solution

Hi,

Everytime I checked Symantec Embedded Database, its services was always stopped. Although I never restart it or stopp it. I also attempted to start it, however it failed to start. With this, I recreated the database. But still, Symantec Embedded Database still stopped automatically. Please help. Thanks.

How SEP Policies and Features work together

$
0
0
I need a solution

Hi, hopefully a quick and easy question. Ive trawled through the admin and implementation guide, but cant find a definitave answer to this:

Will a SEP policy apply to a client if the client doesnt have the feature installed?

For example, we have a client that doesnt have the Intrusion Prevention feature installed. BUT the client is in a Group that does have a policy assigned for IPS. Will this cause issues, or will SEP simply say, i dont have that feature, so i wont attempt to apply the policy.

Many Thanks!

 


How to check subscription days left in Symantec Endpoint Protection

$
0
0
I need a solution

Respected,

I had downloaded Symantec Endpoint Protection named: Symantec_Endpoint_Protection_12.1.2_MP1_Win32-bit_Client_EN

from symantec fileconnect by entering My product Serial Number which starts with M.

I checked my Symantec Endpoint Protection GUI/ Screen 2-3 times. I clicked each and every link on Endpoint client but not getting how many days SEP left.

I also checked .sif file but it also don't include this info.

 

please help in in retrieving my subscription days.

Do Symantec Endpoint Protection is for life time use or for some years only. Please specify.

 

Thanks

Adam

Corrective and preventive actions for the IP attacks

$
0
0
I need a solution

 

guyz i have a question. 

i have monitor Netwrok Threat Protection logs and viewed ful report. in that report i saw that some IPs are attacking my webserver. my web server is connected with my LAN and there is another NIC card installed on it and from there it is connected to WAN (with Live IP). 

question is what are the corrective and preventive actions that i can perform so that these attacks are stopped.?

also how can i block IPs in SEPM?

searching engine in Client Deployment Wizard

$
0
0
I need a solution

Found there are two ways to find out unmanaged computers. One is unmanaged detector, the other is client deployment wizard. In client deployment wizard, click Search Network -> Find computers -> IP address range. The result include managed/unmanaged SEP clients and some other network devices,like router. How the searching engine work? according to ping and nslookup result?
There is an article says the searching result by Client deployment wiard, also can be found in DB sem5 dbo.network_scan_result. Does it mean the searching engine is working automatically and record the search result into DB on schedule?

Client not reporting to Symantec endpoint protection manager

$
0
0
I need a solution

I have a SEPM server version 11.0.3001.2224, all the clients are version 11.0.5002.333; the server and clients are updating correctly. The problem I am having is that the clients are not updating to the SEPM. As it can be seen from attached file 'Virus definitions distribution' the definitions is still on 2011-06-30 though the clients are uptodate. When I check Clients, the Antivirus Status column shows 'Not reporting Status' as per attached file.

How can I solve the problem? I also need to update the SEPM to the latest version 12 RU2; can I upgrade the SEPM 11.0.3001.2224 directly to 12.1.2?

Any comments most welcomed.

Thanks.

Arvind

Browser

$
0
0
I need a solution

Hello,

I have client that are catching virus via there browser and I was wondering is there add-on for other then IE like Firefox, Chrome?

Thank you.

IPv6 - LiveUpdate

$
0
0
I need a solution

Good Afternoon,

Does Symantec LiveUpdate support IPv6 or is it still IPv4 only. 

Referring to Tech Article 174897 which hasn't been updated since 2011, was wondering if anything changed since then.  Does anyone know if it's in the works or a roadmap on when it'll go Live?

Thanks,

Buggin

 

User Defined Scan Greyed-Out

$
0
0
I need a solution

Hi,

I have an issue with some of my servers, users with Windows Admin rights are unbale to create user defined exceptions on the sep clients. I have done everything and confirmed everything on this article  http://www.symantec.com/business/support/index?page=content&id=TECH134387

It's not all the groups that are affected by this, there are groups that I am able to create user defined exceptions on. One of the things that I have noticed on the SEPM though is that for the groups that I can create user defined exceptions on, there are no centralised exceptions configured on the SEPM console.

But for the groups that I cannot create user defined exceptions on, on the SEPM console there centralized exceptions policy has been configured. Is this related to the problem im experiencing or it's completely different, is the anyone who has ever experienced this issue.

Thank you

 

 

 


Ad Sync Throwing Error

$
0
0
I need a solution

Issue: When I perform a Sync at the top level of my domain, it starts to churn as expected, but throws a error shown below.

However, I CAN click through departments individually and select SYNC and it performs with no issues.

I added some logging I know of below, anyone else see this issue? I am using the Active Directory config, as opposed to the LDAP one.

 

2013-05-16 16:15:28.892 THREAD 69 SEVERE: LdapUtils>> lookupDn: Exception occurs while searching... Message: [LDAP: error code 10 - 0000202B: RefErr: DSID-03100742, data 0, 1 access points
 ref 1: 'ourdomain.edu'
 ]
2013-05-16 16:16:34.983 THREAD 69 WARNING: ADSITask>> syncAdTreeGroup: Exception during LDAP query...
2013-05-16 16:16:34.984 THREAD 69 WARNING: org.xml.sax.SAXParseException: Character reference "&#31" is an invalid XML character.
 2013-05-16 16:16:34.994 THREAD 69 WARNING: ADSITask>> syncAdTreeGroup: Failed to retrieve DC=OurTopLevel,DC=Next,DC=EDU for group name=dom1, group id=2E31B67D80F4FB6E0153F79BEF138D48, domain name=Default, domain id=5132542345234523452345234523452345

 

 

ADSyncError.jpg

Move SEM5.db for SEP 12

$
0
0
I need a solution

I need to move the /db/ folder to a new location in SEP 12.1 RU2 and not sure how to do it.  I ran the server config and updated the /data/ folder to move to a new drive, I really need to move the sem5.db. Thanks.

SEP 12.1.2 filling hard disk with logs and dump after upgrade

$
0
0
I need a solution

Hello,

I recently upgrade to 12.1.2 from 12.1

Upgrade is successful. The next day, cannot connect to SEPM.
Found SEPM service is stopped, and cannot start.

findings

1- SEP Manager cannot start

2- Harddsik is full.

I found that   ...\SEPM\tomcat\bin\ is full of hs_errpid***.mdmp and hs_err_pid***.log.

The .mdmp files cause the HDD full. Need help

Thanks

 

Error whie installing SEPM on Windows7

$
0
0
I need a solution

Error is coming 1935 while installting SEPM on Window7, I have tried the below olution but it did not work properly.

 

Situation:Why is error 1935 produced when installing Symantec Endpoint Protection on a computer running Microsoft Windows Vista?

Solution:To resolve this issue follow the steps below:
  1. Click StartRun
  2. Type fsutil resource setautoreset true C:\
  3. Restart the computer (required). The "fsutil" command above will direct the "Transactional Resource Manager" to clean its metadata on the next drive mount.
  4. Start the Symantec Endpoint Protection installation.
  5.  

 

if disk size is changed, will endpoint start?

$
0
0
I need a solution

I need to change the size of my disk to add a new partition for dual boot.

If I do this, will endpoint work when I next start it as the disk size will have changed?

Viewing all 12029 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>