Solved

Symantec location awareness changing

Posted on 2015-01-06
2
441 Views
Last Modified: 2015-01-20
I am trying to work out why multiple servers report changing location in their Symantec logs. The criteria is set to switch to external if the management server is not contactable. The servers are on the same LAN as the management server and the management server is not going down.
Also can anyone tell me the impact of a client switching locations. I don't have any firewalls configured so its not getting a new firewall policy but is there any negative impact for switching locations. Thanks
0
Comment
Question by:Sid_F
2 Comments
 
LVL 63

Accepted Solution

by:
btan earned 500 total points
ID: 40534750
It seems to have similar issue faced though it is in a (local and remote) hub and spoke context, but the running through of the symlink can be relevant as part of isolation findings.
http://www.symantec.com/connect/forums/location-awareness-problem-client-switching

Mostly the client relies on its sylink communications file and try to resolve the findings based on the location awareness logic (LAN vs Foreign score). If there are any dependencies in not resolving to find the mgmt srv be it DNS lookup etc, it is consider "missing" and also it first check the “Remember the last location” option so if that is resolved to past mgmt srv, it give a false impression that mgmt srv is "missing" too. Or the heartbeat to mgmt srv is slow to come back or block to come back etc..

Location Awareness Logic- How does Location Awareness determine what location to assign a Symantec Endpoint Protection (SEP) client?
http://www.symantec.com/business/support/index?page=content&id=TECH97097

Also for debugging autolocation, there can be more trail of leading events to maybe what is not alright in debug.log
http://www.symantec.com/business/support/index?page=content&id=TECH102412#AutoLocation

Best Practices for Symantec Endpoint Protection Location Awareness
http://www.symantec.com/business/support/index?page=content&id=TECH98211

Symantec does not recommend more than seven (7) locations per group when using Location Awareness as this can affect the execution time on how long it takes the SEP client to process and ultimately connect to a valid location where all conditions have been met.
0
 
LVL 6

Author Closing Comment

by:Sid_F
ID: 40559961
Thanks
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Sudden performance loss on a Vista system. 14 154
webroot plus microsoft security essentials 2 142
Disable SSLv3.0/TLSv1.0 - Windows 2012R2 3 47
FTP server windows 2008 5 39
This is a guide to the following problem (not exclusive but here) on Windows: Users need our support and we supporters often use global administrative accounts to do this. Using these accounts safely is a real challenge. Any admin who takes se…
The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question