?
Solved

Symantec Endpoint Protection -computers automaticaly removed then added?!?

Posted on 2011-09-12
7
Medium Priority
?
860 Views
Last Modified: 2013-12-09
Hi,
Symantec Endpoint Protection SBE V12. I received an automated email from the SPC_Server: "Number of clients changed: 3.  Changes could be that a client was added or removed."  -The report listed three computer "client changes" and said they were "removed".

I looked in the Protection Center and the three were indeed gone. But looking at the workstations the AV client is there and is running and reports everything is OK. -A day later I get notification of "removal" of another 2 computers. Later that same day all 5 computers re-apear in the Protection Center.

Can someone shed some light on why this would happen or point me towards a log file that might explain?

Thank you!
0
Comment
Question by:BobBrink
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
7 Comments
 
LVL 20

Accepted Solution

by:
jimmymcp02 earned 2000 total points
ID: 36531150
Its this what you are experiencing?
Clients may become disconnected from Symantec Endpoint Protection
Manager when using Location Based Communication Settings
Symantec Endpoint Protection is designed so that clients can know their location
(in the office, at home, on the road, etc.). Based on that location, their policies can
change, including the Management Server to which they are linked.
If you are using a policy that is triggered by a location, the client may become
disconnected when it is using that location-based policy.
To work around this problem:
¦ Change the client's location, even temporarily.
¦ Restart the client.

http://www.symantec.com/business/support/index?page=content&id=DOC4332&key=54619
0
 

Author Comment

by:BobBrink
ID: 36531285
Nope, no location based policies in place.

You got me thingking though. I checked DHCP and the "removal" and subsequent addition of the computers seems to coinside with a change to their IP address. I did not check all machines, but this was true on all three I looked at.  -Pretty goofy.

Thank you!

Bob
0
 
LVL 20

Expert Comment

by:jimmymcp02
ID: 36537603
Do you have groups?

If so are there any other groups that are not experiencing this issue? maybe we can move one of those affeted clients into a different groups for testing
0
Four New Appliances. Same Industry-leading Speeds.

But don't take it from us.  The Firebox M370 is Miercom tested and Miercom approved, outperforming its competitors for stateless and stateful traffic throughput scenarios.  Learn more about the M370, M470, M570 and M670 and find the right solution for your organization today!

 

Author Comment

by:BobBrink
ID: 36540160
I've requested that this question be closed as follows:

Accepted answer: 0 points for BobBrink's comment http:/Q_27303157.html#36531285

for the following reason:

Got me going in right direction.
0
 

Author Comment

by:BobBrink
ID: 36537913
this was not my intent. My intent was to close and give all points to jummy
0
 
LVL 20

Expert Comment

by:jimmymcp02
ID: 36540161
I guess i have to object to closing the question in order to get the points :)
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you thought ransomware was bad, think again! Doxware has the potential to be even more damaging.
Ransomware continues to be a growing problem for both personal and business users alike and Antivirus companies are still struggling to find a reliable way to protect you from this dangerous threat.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

801 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question