Hello,
If you are planning to upgrade or migrate to Symantec Endpoint Protection 12.1.3, please take a look at the latest how-to article created by our very own SEP content council team.
Best practices for upgrading to Symantec Endpoint Protection 12.1.x
http://www.symantec.com/business/support/index?page=content&id=TECH163700
Please be sure to vote this post up, if you find it helpful.
I am running SEP version 11.0 and SEPM on SBS 2003 with 10 client computers running Windows XP. Up until now it has been running without incident. While the virus definitions have been updating properly on the server, it is not being pushed out to the clients. When I attempt to login to SEPM I get a "Failed to connect to server" error. When I go into services and restart the SEPM service I can successfully log into SEPM, but only briefly. As I try to navigate through the SEPM it will knock me out and won't let me log back in.
The event viewer shows Event ID 4096, Source: semsrv, Description: The Java Virtual Machine has exited with a code of -1, the service is being stopped.
In previous posts with similar problems the forum participants asked to provided with the scm-server-0.log. Can someone look through it and give me some troubleshooting suggestions:
2013-06-06 22:25:37.387 SEVERE: ================== Server Environment ===================
2013-06-06 22:25:37.387 SEVERE: os.name = Windows 2003
2013-06-06 22:25:37.387 SEVERE: os.version = 5.2
2013-06-06 22:25:37.387 SEVERE: os.arch = x86
2013-06-06 22:25:37.387 SEVERE: java.version = 1.5.0_15
2013-06-06 22:25:37.387 SEVERE: java.vendor = Sun Microsystems Inc.
2013-06-06 22:25:37.387 SEVERE: java.vm.name = Java HotSpot(TM) Server VM
2013-06-06 22:25:37.387 SEVERE: java.vm.version = 1.5.0_15-b04
2013-06-06 22:25:37.387 SEVERE: java.home = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\jdk\jre
2013-06-06 22:25:37.387 SEVERE: catalina.home = C:\Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat
2013-06-06 22:25:37.387 SEVERE: java.user = null
2013-06-06 22:25:37.387 SEVERE: user.language = en
2013-06-06 22:25:37.387 SEVERE: user.country = US
2013-06-06 22:25:37.387 SEVERE: scm.server.version = 11.0.3001.2224
2013-06-06 22:25:40.481 SEVERE: ================== StartClientTransport ===================
2013-06-06 22:25:40.887 SEVERE: Schedule is started!
2013-06-06 22:25:41.887 SEVERE: StateCheckpointTask connect to secars failed: SERVICE NOT AVAILABLE
2013-06-06 22:28:57.154 SEVERE: Unknown Exception
java.lang.OutOfMemoryError: Java heap space
at com.sybase.jdbc2.jdbc.SybPreparedStatement.countParams(SybPreparedStatement.java:882)
at com.sybase.jdbc2.jdbc.SybPreparedStatement.<init>(SybPreparedStatement.java:55)
at com.sybase.jdbc2.jdbc.SybConnection.prepareStatement(SybConnection.java:574)
at com.sybase.jdbc2.jdbc.MdaManager.getMetaDataAccessor(MdaManager.java:360)
at com.sybase.jdbc2.jdbc.MdaManager.getMetaDataAccessor(MdaManager.java:311)
at com.sybase.jdbc2.jdbc.MdaManager.getMetaDataAccessor(MdaManager.java:302)
at com.sybase.jdbc2.tds.Tds.setOption(Tds.java:1022)
at com.sybase.jdbc2.jdbc.SybConnection.setAutoCommit(SybConnection.java:626)
at org.apache.commons.dbcp.DelegatingConnection.setAutoCommit(DelegatingConnection.java:268)
at org.apache.commons.dbcp.PoolableConnectionFactory.activateObject(PoolableConnectionFactory.java:368)
at org.apache.commons.pool.impl.GenericObjectPool.borrowObject(GenericObjectPool.java:787)
at org.apache.commons.dbcp.PoolingDataSource.getConnection(PoolingDataSource.java:95)
at org.apache.commons.dbcp.BasicDataSource.getConnection(BasicDataSource.java:540)
at com.sygate.scm.server.db.util.DatabaseUtilities.getDefaultDatabaseConnection(DatabaseUtilities.java:215)
at com.sygate.scm.server.db.util.DatabaseUtilities.getDefaultDatabaseConnection(DatabaseUtilities.java:206)
at com.sygate.scm.server.metadata.MetadataManager.getConnectionNoCheckRequireTransactionId(MetadataManager.java:703)
at com.sygate.scm.server.metadata.MetadataManager.getConnection(MetadataManager.java:676)
at com.sygate.scm.server.metadata.MetadataManager.getLastestUsnForCollection(MetadataManager.java:167)
at com.sygate.scm.server.configmanager.ConfigManager.getLatestUsnForCollection(ConfigManager.java:1159)
at com.sygate.scm.server.task.SyncLuConfigTask.syncLuConfig(SyncLuConfigTask.java:55)
at com.sygate.scm.server.task.SyncLuConfigTask.run(SyncLuConfigTask.java:33)
at java.util.TimerThread.mainLoop(Timer.java:512)
at java.util.TimerThread.run(Timer.java:462)
2013-06-06 22:29:01.685 SEVERE: Unknown Exception in: com.sygate.scm.server.consolemanager.RequestHandler
java.lang.OutOfMemoryError: Java heap space
at java.lang.AbstractStringBuilder.expandCapacity(AbstractStringBuilder.java:99)
at java.lang.AbstractStringBuilder.append(AbstractStringBuilder.java:393)
at java.lang.StringBuffer.append(StringBuffer.java:225)
at org.apache.catalina.loader.StandardClassLoader.toString(StandardClassLoader.java:524)
at org.apache.catalina.loader.WebappClassLoader.toString(WebappClassLoader.java:993)
at java.lang.String.valueOf(String.java:2615)
at java.lang.StringBuffer.append(StringBuffer.java:220)
at javax.xml.parsers.FactoryFinder.findJarServiceProvider(Unknown Source)
at javax.xml.parsers.FactoryFinder.find(Unknown Source)
at javax.xml.parsers.DocumentBuilderFactory.newInstance(Unknown Source)
at com.sygate.scm.server.consolemanager.RequestHandler.<init>(RequestHandler.java:71)
at com.sygate.scm.server.servlet.ConsoleServlet.doPost(ConsoleServlet.java:82)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:810)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:199)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:145)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:210)
at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:596)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:433)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:955)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:139)
at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:596)
at org.apache.catalina.valves.CertificatesValve.invoke(CertificatesValve.java:198)
at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:594)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:433)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:955)
at org.apache.catalina.core.StandardContext.invoke(StandardContext.java:2460)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:133)
at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:596)
at org.apache.catalina.valves.ErrorDispatcherValve.invoke(ErrorDispatcherValve.java:119)
at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:594)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
2013-06-06 22:29:16.045 SEVERE: Unexpected server error.
com.sygate.scm.server.metadata.MetadataException:
at com.sygate.scm.server.metadata.MetadataManager.getConnectionNoCheckRequireTransactionId(MetadataManager.java:705)
at com.sygate.scm.server.metadata.MetadataManager.getConnection(MetadataManager.java:676)
at com.sygate.scm.server.metadata.MetadataManager.getLastestUsnForCollection(MetadataManager.java:167)
at com.sygate.scm.server.configmanager.ConfigManager.getLatestUsnForCollection(ConfigManager.java:1159)
at com.sygate.scm.server.task.SyncLuConfigTask.syncLuConfig(SyncLuConfigTask.java:55)
at com.sygate.scm.server.task.SyncLuConfigTask.run(SyncLuConfigTask.java:33)
at java.util.TimerThread.mainLoop(Timer.java:512)
at java.util.TimerThread.run(Timer.java:462)
Caused by: java.sql.SQLException: SEM: Connect to database failed
at com.sygate.scm.server.db.util.DatabaseUtilities.getDefaultDatabaseConnection(DatabaseUtilities.java:243)
at com.sygate.scm.server.db.util.DatabaseUtilities.getDefaultDatabaseConnection(DatabaseUtilities.java:206)
at com.sygate.scm.server.metadata.MetadataManager.getConnectionNoCheckRequireTransactionId(MetadataManager.java:703)
... 7 more
com.sygate.scm.server.util.ServerException: Unexpected server error.
at com.sygate.scm.server.configmanager.ConfigManager.getLatestUsnForCollection(ConfigManager.java:1161)
at com.sygate.scm.server.task.SyncLuConfigTask.syncLuConfig(SyncLuConfigTask.java:55)
at com.sygate.scm.server.task.SyncLuConfigTask.run(SyncLuConfigTask.java:33)
at java.util.TimerThread.mainLoop(Timer.java:512)
at java.util.TimerThread.run(Timer.java:462)
Caused by: com.sygate.scm.server.metadata.MetadataException:
at com.sygate.scm.server.metadata.MetadataManager.getConnectionNoCheckRequireTransactionId(MetadataManager.java:705)
at com.sygate.scm.server.metadata.MetadataManager.getConnection(MetadataManager.java:676)
at com.sygate.scm.server.metadata.MetadataManager.getLastestUsnForCollection(MetadataManager.java:167)
at com.sygate.scm.server.configmanager.ConfigManager.getLatestUsnForCollection(ConfigManager.java:1159)
... 4 more
Caused by: java.sql.SQLException: SEM: Connect to database failed
at com.sygate.scm.server.db.util.DatabaseUtilities.getDefaultDatabaseConnection(DatabaseUtilities.java:243)
at com.sygate.scm.server.db.util.DatabaseUtilities.getDefaultDatabaseConnection(DatabaseUtilities.java:206)
at com.sygate.scm.server.metadata.MetadataManager.getConnectionNoCheckRequireTransactionId(MetadataManager.java:703)
... 7 more
2013-06-06 22:29:16.935 SEVERE: Shuting down server ...
Hi All,
We would like to create a single msi package to deploy client , in SEP when we create a client package it creates as a single exe or multiple files with msi.
If we using the msi it need the other relevant files. But we need to have only a single msi file.
Hello. Does SEPM 12.1+ console include the ability to track administrator/user accesses directly into the console by way of access logs?
Thanks!
jdk1965
Hai,
We have nearly 1900 systems with Windows XP / 7 / 8 OS. Last 2 days lot of issues due to W32.Downadup.B malware. Almost 50 % systems infeteced with this malware. All the systems having some scheduled task and its sending unknown network traffic in network. I am unable to find the sample file for submitted to symantec support team.Asusual i have received the reply from support team "this is not a virus".
I have SEP 12.2 in all the systems, now SEP detecting the malware but it showning only infected. But not removing the same and even non of the process are terminated by SEP 12.2. Now my network totally dead slow. Unable to use our application.
Can you help some one to remove this malware and how to prevent using SEP policies. I have attached the screeshot and loadpoint analysis logs for reference.
Thanks & regadrs
Rajasekaran.S
I am doing a install of SEPM 12.1.2 install i am doing it the same way i have done it 4 times before, it goes thru the config management server section
Then it comes up with 'Failed to add SAV32 pakage into the database", does same for SAV64 & SEP_Mac, when you click okay it takes you back to the database setup window
It creates the sem5 database, and sem5 user.
Any ideas or hints?
Hello,
I have a problem, my SEPM console cannot display home,monitor,report pages .. i've tried to download and install java 6 update 14 offline that had been recommended by this link " http://www.symantec.com/business/support/index?page=content&id=TECH102328 and http://www.symantec.com/business/support/index?page=content&id=TECH96362 but this is not succeeded. anyone, please give me a best solution.
Thanks,
Fikri Reza
hello,
I am currently deploying SEP client to DMZ from another network. There is a hardware firewall between DMZ and network of SEPM.
I read from Symantec Articles of the required port 8014 and 445 in firewall.However it does not work because the search client fail to find any computer.
Is it required to allow icmp in hardware firewall?
Thank you very much
could you please provide a solution in moving clients ( more than 100) from one default conatiner to appropriate container.
Hi all,
I am trying to delete unused clients from my license. I have deleted them manuually from the Clients list. I then changed the delete clients that have not been connected for specified time to 1 days. I then truncated the transaction logs and rebuilt the database.
But I am still overdeployed.
dears
u have SEP installed on windows 2008 R2 server ,before few weeks i discover that i have a virus W32.Downadup.B , i removed it but return again , i follow SYmantec removal tools but no results
plz advice how to git rid of this virus
BR
Hello everyone, i need the ability for users to right click and disable SEP if i provide them a password.
In SEPM under my client folder
I clicked on General Settings for Servers and selected require a password to stop the client service (i entered a password).
for some reason when my clients right click on SEP in the task tray the disable SEP is grayed out.
I also looked in my AV/spyware policy and unlocked: auto-protect -- enable -autoprotoct, internet email auto-protect, and outlook. that still grays it out but i can open up SEP console and click options i can disable SEP but at this point it doesnt prompt me for a password.
any help will be greatly appreciated.
Thank you,
When manually running live update, I see successful downloading for 1 - 10. The section for Update available for Revocation Data, I get a failed download. SEPM shows all green for the client. Any ideas how to resolve this would be appreciated.
Thanks!
I'm working on automating some reports and I need to have SEP created a scheduled report and distribute it via a method other than email. If it could just automatically output it to a folder, or fulfill a report request via an HTTP link that would be accepted.
I just have no way for my script to receive an email and obtain a report from there.
I see other options and I have some other daily reports, but I would like a daily top 10 list. I know it is right on the home page of the SEPM manager, but I would like to have a daily report as well. Can this be done? If yes, how? SEP 12.....2093
SEPM is 12.1.2015 2015
I would like to study some more, I figure the more I learn the less problems I will encounter. (maybe), but it would be nice to have a cert in this.
Where do I begin?
I have install symantec antivirus in one system, after restart the system error occur on screen System_service_exception "sysplant.sys" and dump the system or restart.
Any idea to solve it and any reason for this issue.
Hi,
Multi of clients are not communicated with my manager server
I am using sylink drop to replace it
It wast my time in manuall activity.
Any specific solution to replace it remotely on muticilents?
Bonjour,
Apres une mise à jour et redemarrage du serveur SEPM, je ne parviens pas à ouvrir une session de la console SEPM.
En allant voir les logs, j'ai ce message
"l'execution de la marchine virtuelle Java s'est terminée en renvoyant le code -1. Le service est en cours d'arret"
Sourvce: semsrv
Event ID: 4096
merci de votre aide
Hi All,
We are using SEP 12.1 RU2 MP1
All clients are in Pull Mode.
All clients are showing offline/self-managed while updating policy. Please find the attached screenshots for the same.
Because of this behaviour most of the clients are showing as offline in the SEPM console.
Secars teast result is OK. There are no network issues.
Is it a known issue?