Good morning gentlemen.
A customer wants to perform SEP monitoring by leaving his dashboard on a screen. Access is being made via browser. We note that in a few minutes the screen displays time out. Is there any way to increase the time out and refresh the screen? Access is done by the url https: // [IP_DO_SERVIDOR]: 8443 / console / apps / sepm
Here are the Device Protection Details
I am using the SEP 15 Cloud Manager (https://sep.securitycloud.symantec.com)
We have a device that inddicates a status of COMPRIMISED. However there we can find no way to resolve the issue.
THe logs indicate a bunch of BLOCKED Network Intrusion Prevention Alerts.
One we see that is outbound "Web Attack: Masscan Scanner Request"... It shows as blocked also
The machine itself seems fine when we log into it a look at the Symantec Endpoint Protection manager.
Is there anything we can do to get the status back to SECURE.
Thanks
Charles
Hello,
After create trial tenant, i get this error when connecting to the portal
I have a situation where I need to install a different Sylink file in different environments for installs of 14.x client on Win 10. I have pulled the Full Install from the SEPM and looked in setAid.ini and Setup.ini to see if there is anywhere I can specify a different Sylink to include but have not been able to find that or find any reference on a command line switch to do this. I also know I can export different setup.exe packages from each environment but that this is for testing progression through test environments and if I did that my production setup would not really be run until production. Please let me know if anyone knows how to do this.
My bank has recently installed new online banking software on their webpage, thinkbank.com. As a result, there is no longer a box in the upper-right corner for me to use to login to my online banking. I contacted my bank's customer support line, and long story short, they are insistant that this is an issue with my anti-virus software, and I need to contact you to whitelist thinkbank.com domain so that I can log in to online banking. I currently have the following installed:
Symantec Endpoint Protection for Mac
Version 14.0.1 (14.0 RU1) buiild 3752 (14.0.3752.1000)
Is this something someone can assist me with?
Hello! SEPM 14 cannot update the definitions for SEP 12.1.x clients. LiveUpdate running, find and download definition for SEP 14 clients, but not find definition for SEP 12. LiveUpdate status show "No updates found for Symantec Endpoint Protection Win32 12.1 RU6 (English)". LiveUpdate Downloads show latest revision "03/27/2019 r6" for SEP12.1 definition.
Hello Friends,
In my manager console , in some groups virus definitions are getting updated although they are online. I checked the server connection status its connected and the other machines which are online are updated but these machines which are not updated are also online. Kindly suggest.
Hi Team,
How to release the license from server,Say we have 100 license and we are installing the sep on server which will be decommisioned in an hour or so for testing.
How to transfer this license to other server?
Regards
Dev
This is refering to https://www.symantec.com/connect/forums/using-rest...
As per https://apidocs.symantec.com/home/saep#_send_a_sus... I was able to issue a "/api/v1/command-queue/files" command successfully which then returned the commandID.
Based on this ID I found the [BINARY_RESULTS_ID] in the [COMMAND] table with the given [COMMAND_ID] to run the "/api/v1/command-queue/file/{file_id}/content" successfully, too.
After saving the output so a file I was able to open the "archive" and saw two files:
- binary file
- metadata.xml
<?xml version="1.0" encoding="UTF-8"?>
<MetaFile>
<File Key="128" OriginalFileName="\\?\C:\Windows\System32\notepad.exe" OriginalFilePath="\\?\C:\Windows\System32" FileName="fa2258b2cc57610861ed1279079e2854cce6768178fe7b3e952a56a990403e66" FileSource="filesystem" FileXORed="true"/>
</MetaFile>The only issue I'm facing now is that I'm unsure how to "convert" the binary file back to its original format (.exe)
I guess you would have to remove the XOR encryption.
Hi All,
does onprem SEP 14.2 and SEP 15 has same feature and funtionality,
using SEP 15 can we achive this on Mac OS. need your expert advise. for same.
1. Policies are not showing on MAC Client.
2. Application and Device Control configuration.
3. MAC OS Hardening Configuration
4. Unable to manage MAC client from SEPM cloud console
Hi,
I am using Symantec ENdpoint protection cloud for 44 users in webportal. My users sometimes when they browse less secure website keeps recieving the tray notification. the only option avaiable to click on show details which doesnot have any disable option. i feel this product is useless in every manner which doesnot bother of users. It keeps popping up and irritates the user. Kindly tell me how to disable this pop ups.
Configured the 14.2 RU1 client upgrade to "Distribute upgrades over 30 days". A couple hours later I noticed more then half of our workstations were pending reboots from upgrades. Has anyone else experienced 14.2 RU1 upgrading clients right away instead of distributing over the set number of days?
I wish to change some settings in the Sep Client. However, even when I use an Administrator Windows account and try to change the SEP Client settings, i get a message that says "Your administrator has locked this feature".I cant update
The SEP Clients are standalone (ie. no central SEPM server is managing them),
Hi everyone,
i had symantec endpoint protection version 12.* until yesterday and when i had to add a new client to the SEPM list was enought to select "add computer" on the left of the client page and insert the name of the pc, domain and a description.
Now, with the version 14, i cant find that feature anymore.
Could you help me please?
Thanks
Hi,
We have approx. 70 users with 1 Management Server all running SEP 14.2.1015.0100. We have experienced no issues. Last week I updated the SEPM to SEP 14.2.3332.1000. I also pushed out the client software to 3 WIn 10 Pro machines (1809) and 2 Win 7 Pro machines all for testing purposes. The machines are in 2 different groups on the SEPM. On the management server, under Clients - Client Status the 3 Win 10 machines show the client IP as an APIPA 169.254.xxs.xxx address. The 2 Win 7 machines show the correct IP but at the Home screen client status report 1 Win 7 machine show an APIPA address. The other Win 7 machine reports the correct IP.. In all cases the last connected IP shows the correct IP
All the machines are reporting properly to the SEPM and receiving updates. I rolled 2 of the Win 10 machines back to SEP 14.2.1015.0100 and the IPs are now reported correctly to the SEPM. The remaining machines still exhibit the issues noted above. I have run Symdiag on all the machines including the server and only the typical minor issues show. I also ran the db validator on the server and the db is fine. As another test, I deleted the remaining Win 10 machine on the SEPM and waited for the next heartbeat and the SEPM showed the correct IP. Several seconds later I refreshed the screen and the console was reporting the APIPA address again. The 2 Win 7 machines have static IP addresses and the Win 10 machines all use DHCP but have reserved IP addresses in the router, so they always are given the same IP. The groups are on different subnets and each group has its own router. A VPN tunnel exits between the 2 groups.
Has anyone experienced this with SEP 14.2.3332.1000? We never saw this behavior with the prior version. Your thoughts are appreciated.
can a rule be made in Application and device control, to obtain logs of what is copied in the USB?
Hello,
I am trying to connect my Linux clients to a Windows Management Server and none of them seem to be appearing. All of my Windows workstations are able to connect to the management server, but the Linux servers cannot. The firewall on the Linux servers has been stopped and disabled. The debug.log says the same thing for each server "[ERROR] Send of message returned error 400 Bad Request" followed by "[WARN] Failed to connect to server <server_name> ServerException." I'll attach the file I got from one of the servers when I ran the SymDiag tool. Any idea what may be causing this error?
I upgraded SEPM from version 14.2.1031.0100 to version 14.2.3332.1000.
Multiple clients are saying they require a reboot. NO AUTOUPGRADES were configured. Not all clients requesting this reboot, only a handful. I need to know why this occurred but cannot find an answer.
We have an issue where our SEP Install blocks or hangs the instalaltion of Office.
Once we uninstall SEP from the client machine (tested on numerous); it works again.
Please advise on any way forward as this work around is not the best.
In checking Windows Logs it shows up no errors and the Syamtec Logs show no details as well.
Help please.
Hola buenas.
Estoy implementando SEP 14.2 en mi empresa y tenemos 150 licencias. Hemos superado en 10 licencias y sigue funcioanndo. Me gustaría saber que problema tienen esas 10 maquinas, dejarían de tener soporte con LiveUpdate? no se actualizarían las politicas? he revisado la documentación pero no hace referencia a que ocurre con ese exceso.
Un saludo