Solved

Symantec Endpoint Protection -computers automaticaly removed then added?!?

Posted on 2011-09-12
7
853 Views
Last Modified: 2013-12-09
Hi,
Symantec Endpoint Protection SBE V12. I received an automated email from the SPC_Server: "Number of clients changed: 3.  Changes could be that a client was added or removed."  -The report listed three computer "client changes" and said they were "removed".

I looked in the Protection Center and the three were indeed gone. But looking at the workstations the AV client is there and is running and reports everything is OK. -A day later I get notification of "removal" of another 2 computers. Later that same day all 5 computers re-apear in the Protection Center.

Can someone shed some light on why this would happen or point me towards a log file that might explain?

Thank you!
0
Comment
Question by:BobBrink
  • 3
  • 3
7 Comments
 
LVL 20

Accepted Solution

by:
jimmymcp02 earned 500 total points
ID: 36531150
Its this what you are experiencing?
Clients may become disconnected from Symantec Endpoint Protection
Manager when using Location Based Communication Settings
Symantec Endpoint Protection is designed so that clients can know their location
(in the office, at home, on the road, etc.). Based on that location, their policies can
change, including the Management Server to which they are linked.
If you are using a policy that is triggered by a location, the client may become
disconnected when it is using that location-based policy.
To work around this problem:
¦ Change the client's location, even temporarily.
¦ Restart the client.

http://www.symantec.com/business/support/index?page=content&id=DOC4332&key=54619
0
 

Author Comment

by:BobBrink
ID: 36531285
Nope, no location based policies in place.

You got me thingking though. I checked DHCP and the "removal" and subsequent addition of the computers seems to coinside with a change to their IP address. I did not check all machines, but this was true on all three I looked at.  -Pretty goofy.

Thank you!

Bob
0
 
LVL 20

Expert Comment

by:jimmymcp02
ID: 36537603
Do you have groups?

If so are there any other groups that are not experiencing this issue? maybe we can move one of those affeted clients into a different groups for testing
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 

Author Comment

by:BobBrink
ID: 36540160
I've requested that this question be closed as follows:

Accepted answer: 0 points for BobBrink's comment http:/Q_27303157.html#36531285

for the following reason:

Got me going in right direction.
0
 

Author Comment

by:BobBrink
ID: 36537913
this was not my intent. My intent was to close and give all points to jummy
0
 
LVL 20

Expert Comment

by:jimmymcp02
ID: 36540161
I guess i have to object to closing the question in order to get the points :)
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

As more computers now shipped with 64-bit version of Windows, more users are now using this Operating System.  So it's important to be aware how some 32-bit diagnostic tool works on these systems, so we know what to expect when analyzing the logs an…
OVERVIEW This guide provides information on the process performed when the Symantec Endpoint Protection (SEP) client checks in with the Symantec Endpoint Protection Manager (SEPM). AUDIENCE Information Technology personnel responsible for suppo…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now