Solved

Symantec Endpoint Protection -computers automaticaly removed then added?!?

Posted on 2011-09-12
7
857 Views
Last Modified: 2013-12-09
Hi,
Symantec Endpoint Protection SBE V12. I received an automated email from the SPC_Server: "Number of clients changed: 3.  Changes could be that a client was added or removed."  -The report listed three computer "client changes" and said they were "removed".

I looked in the Protection Center and the three were indeed gone. But looking at the workstations the AV client is there and is running and reports everything is OK. -A day later I get notification of "removal" of another 2 computers. Later that same day all 5 computers re-apear in the Protection Center.

Can someone shed some light on why this would happen or point me towards a log file that might explain?

Thank you!
0
Comment
Question by:BobBrink
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
7 Comments
 
LVL 20

Accepted Solution

by:
jimmymcp02 earned 500 total points
ID: 36531150
Its this what you are experiencing?
Clients may become disconnected from Symantec Endpoint Protection
Manager when using Location Based Communication Settings
Symantec Endpoint Protection is designed so that clients can know their location
(in the office, at home, on the road, etc.). Based on that location, their policies can
change, including the Management Server to which they are linked.
If you are using a policy that is triggered by a location, the client may become
disconnected when it is using that location-based policy.
To work around this problem:
¦ Change the client's location, even temporarily.
¦ Restart the client.

http://www.symantec.com/business/support/index?page=content&id=DOC4332&key=54619
0
 

Author Comment

by:BobBrink
ID: 36531285
Nope, no location based policies in place.

You got me thingking though. I checked DHCP and the "removal" and subsequent addition of the computers seems to coinside with a change to their IP address. I did not check all machines, but this was true on all three I looked at.  -Pretty goofy.

Thank you!

Bob
0
 
LVL 20

Expert Comment

by:jimmymcp02
ID: 36537603
Do you have groups?

If so are there any other groups that are not experiencing this issue? maybe we can move one of those affeted clients into a different groups for testing
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:BobBrink
ID: 36540160
I've requested that this question be closed as follows:

Accepted answer: 0 points for BobBrink's comment http:/Q_27303157.html#36531285

for the following reason:

Got me going in right direction.
0
 

Author Comment

by:BobBrink
ID: 36537913
this was not my intent. My intent was to close and give all points to jummy
0
 
LVL 20

Expert Comment

by:jimmymcp02
ID: 36540161
I guess i have to object to closing the question in order to get the points :)
0

Featured Post

Free Tool: Postgres Monitoring System

A PHP and Perl based system to collect and display usage statistics from PostgreSQL databases.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Yet another Ransome ware 13 198
Symantec Endpoint Protection blocking autorun.if 13 66
Virus that hides folders 6 56
Evaluating Enterprise Antivirus solutions 2 38
So you got the Conficker. You could go to each machine and run the eye chart test (http://www.confickerworkinggroup.org/infection_test/cfeyechart.html), but in a bigger environment, or if you prefer to work smarter and not harder, you need some …
Have you ever tried to find someone you know on Facebook and searched to find more than one result with the same picture? Perhaps someone you know has told you that they have a 'facebook stalker' or someone who is 'posing as them' online and ta…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question