Hi Team,

We observed below errors in the eventlogs.

2018-08-27T02:59:31+08:00 n01gbbcproxy01.infra.dbs.com ProxySG: 6F0101 Health Monitor (WARNING): Health Check Status is 'WARNING'(1) SEVERE_ERROR notifier.cpp 112

2018-08-27T04:06:38+08:00 n01gbbcproxy01.infra.dbs.com ProxySG: 640002 6368.310 f=BCACHE p=EVENT m=Reranking peers E 171/256 reason 2(0) SEVERE_ERROR debug_slog.hpp 330

2018-08-27T04:06:38+08:00 n01gbbcproxy01.infra.dbs.com ProxySG: 640002 6368.310 f=BCACHE p=EVENT m=Peers reranked(0) SEVERE_ERROR debug_slog.hpp 330

2018-08-27T08:08:46+08:00 n01gbbcproxy01.infra.dbs.com ProxySG: 6F0101 Health Monitor (WARNING): Health Check Status is 'WARNING'(1) SEVERE_ERROR notifier.cpp 112

2018-08-27T08:11:06+08:00 n01gbbcproxy01.infra.dbs.com ProxySG: 6F0101 Health Monitor (WARNING): Health Check Status is 'WARNING'(1) SEVERE_ERROR notifier.cpp 112

2018-08-27T02:59:24+08:00 n01gbbcproxy02.infra.dbs.com ProxySG: 6F0101 Health Monitor (WARNING): Health Check Status is 'WARNING'(1) SEVERE_ERROR notifier.cpp 112

2018-08-27T04:06:48+08:00 n01gbbcproxy02.infra.dbs.com ProxySG: 640002 7505.008 f=BCACHE p=EVENT m=Reranking peers E 171/256 reason 2(0) SEVERE_ERROR debug_slog.hpp 330

2018-08-27T04:06:48+08:00 n01gbbcproxy02.infra.dbs.com ProxySG: 640002 7505.008 f=BCACHE p=EVENT m=Peers reranked(0) SEVERE_ERROR debug_slog.hpp 330

2018-08-27T08:08:13+08:00 n01gbbcproxy02.infra.dbs.com ProxySG: 6F0101 Health Monitor (WARNING): Health Check Status is 'WARNING'(1) SEVERE_ERROR notifier.cpp 112

2018-08-27T08:10:33+08:00 n01gbbcproxy02.infra.dbs.com ProxySG: 6F0101 Health Monitor (WARNING): Health Check Status is 'WARNING'(1) SEVERE_ERROR notifier.cpp 112

Please advise to proceed further.

Thanks,

Ram.

I have windows 10 1709  Trying to install SEP 14.0 MP1 build 2332

Getting error can't install on this operating system.

Can someone help me with this issue.

Thanks,

Kenny

Hello,

We're unable to send email to mesagelabs customer. Our server IP is  51.68.146.235

Our customer MXs are:

play.pl mail is handled by 10 cluster1.eu.messagelabs.com.
play.pl mail is handled by 20 cluster1a.eu.messagelabs.com.

Emails are received by messagelabs servers, but few seconds later I receive error: 

Reason: 521 5.2.1 Error: True Source IP has bad reputation

I've written to investigation@review.symantec.com , but nobody is responding. Who should I contact to be able to send emails? We have set SPF, DKIM, DMARC and all others customers receive emails without problem.

Hi,

We define "Multiple Group Update Providers".
In a branch the GUP is with IP 172.16.16.10. But some customers of this branch are in another 172.16.18.xxx network, for this different network do you need to define another GUP?

Would it be a GUP by network?

We use Mxtoolbox as my dmarc analysis and the only time we got false positive is when it pass thru (fowarded by) Message Labs. When it happened, SPF and DMARC failed while forwarded by other don't.

We are with Gmail but many of our clients are with Message Labs.

Here's an example of an error message:

Reason: 550-5.7.1 Unauthenticated email from reptile.tech is not accepted due to
550-5.7.1 domain's DMARC policy. Please contact the administrator of
550-5.7.1 reptile.tech domain if this was a legitimate mail. Please visit
550-5.7.1  https://support.google.com/mail/answer/2451690 to learn about the
550 5.7.1 DMARC initiative. r30-v6si2953643pgk.87 - gsmtp

The message subject was: Statut de cette semaine
The message date was: Fri, 24 Aug 2018 10:17:41 -0400
The message identifier was: 56/3C-18738-983108B5
The message reference was: server-9.tower-320.messagelabs.com!1535120263!24804!1

We have the highest dmarc setting (reject 100%).

If anybody could help it would be appreciated,
Thanks

Hi,

Recently I trying to install SEP 12.1.16 trough SCCM Packege Deployment. I made a standard program installation, distributed to the distribution point, and started the deployment to 3 Windows 10 1803 machine, but after a period of time the deployment gives an error message which is called Error 1603. I don't know why it keeps poping up, because the user has full controll on the source folder and it's a domain admin.

If anyone has an idea what to do I would be grateful.

Best whises,

Peter

Hi,

We are using MAC OS 10.13 and we are getting all event notificaotion (Blocking devices, Scanning from another machine, Arp poisoning and etc) in Symantec managed antivirus which is 14.2. RU0.

We want to disable notification only, what is happening in my machine and Symantech agent it should not appear on User machine as it irritates user when we receive scanning/ARP poisoning events in bulk on a machine.

As per Symantec: they are able to block notification but unable to block action taken on this machine (Like file deleted or repaired).

We want to provide a solution for disable action notification also.

Case which I opened: Case Number 15305087

Article by Symantec: https://support.symantec.com/en_US/article.TECH134761.html
 

Regards

Krishan

Hi,

Can we configure a single site with two SEPM and two SQL DB's?

Would someone be able to tell me how to download the resetpass.bat file for password resets in v14.0 MP2?

Hello,

I see from a search on the forum that my question was asked in 2014, but I don't see any responses. So I'll ask anyway.....

https://www.symantec.com/connect/forums/rest-apis-...

Is there a way to start a File System Scanner scan either from the command line or from a REST API? We are being forced to use File System Scanner and right now it is a manual process to start everything and I'd like to script it. I can script it from the server side of the servers that need scanned, but it would require the scan to be active on the Network Discover server for it to work.

Thanks in advance!

Hello,

Already have install a It Analytics StandAlone Pack for DLP 14 and I like to have the "Cube" from Sepm 14, Its possible to obtain this from import the zip files in the same console and later combine some reports?

My scope of version beginning with 12.1 a 14

Regards

Miguel Angel

Hi,

We were trying to reboot the server recently due to slow incident detection, however when trying to logon to Enforce it keep looping.

ProtectManager/GlobalDialog?type=NOT_FOUND

Error from tomcat:

Exception sending context initialized event to listener instance of class com.vontu.manager.spring.ManagerContextLoaderListener
org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'managerSpringConfiguration': Unsatisfied dependency expressed through field 'systemKeyStore': Error creating bean with name 'getKeyIgnition': Invocation of init method failed; nested exception is org.springframework.dao.QueryTimeoutException: ORA-01654: unable to extend index PROTECT.SYSTEMEVENT_FB4A by 128 in tablespace USERS
; SQL [n/a]; nested exception is org.hibernate.QueryTimeoutException: ORA-01654: unable to extend index PROTECT.SYSTEMEVENT_FB4A by 128 in tablespace USERS
; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getKeyIgnition': Invocation of init method failed; nested exception is org.springframework.dao.QueryTimeoutException: ORA-01654: unable to extend index PROTECT.SYSTEMEVENT_FB4A by 128 in tablespace USERS
; SQL [n/a]; nested exception is org.hibernate.QueryTimeoutException: ORA-01654: unable to extend index PROTECT.SYSTEMEVENT_FB4A by 128 in tablespace USERS

    at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredFieldElement.inject(AutowiredAnnotationBeanPostProcessor.java:569)
    at org.springframework.beans.factory.annotation.InjectionMetadata.inject(InjectionMetadata.java:88)
    at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor.postProcessPropertyValues(AutowiredAnnotationBeanPostProcessor.java:349)
    at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1214)
    at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:543)
    at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:482)
    at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:306)
    at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:230)
    at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:302)
    at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:197)
    at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:776)
    at org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:861)
    at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:541)
    at org.springframework.web.context.ContextLoader.configureAndRefreshWebApplicationContext(ContextLoader.java:444)
    at com.vontu.manager.spring.ManagerContextLoaderListener.configureAndRefreshWebApplicationContext(ManagerContextLoaderListener.java:43)
    at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:326)
    at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:107)
    at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:5118)
    at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5634)
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:145)
    at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:899)
    at org.apache.catalina.core.ContainerBase.access$000(ContainerBase.java:133)
    at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:156)
    at org.apache.catalina.core.ContainerBase$PrivilegedAddChild.run(ContainerBase.java:145)
    at java.security.AccessController.doPrivileged(Native Method)
    at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:873)
    at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:652)
    at org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:1260)
    at org.apache.catalina.startup.HostConfig$DeployDirectory.run(HostConfig.java:2002)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
    at java.util.concurrent.FutureTask.run(FutureTask.java:266)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
    at java.lang.Thread.run(Thread.java:748)
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'getKeyIgnition': Invocation of init method failed; nested exception is org.springframework.dao.QueryTimeoutException: ORA-01654: unable to extend index PROTECT.SYSTEMEVENT_FB4A by 128 in tablespace USERS
; SQL [n/a]; nested exception is org.hibernate.QueryTimeoutException: ORA-01654: unable to extend index PROTECT.SYSTEMEVENT_FB4A by 128 in tablespace USERS

    at org.springframework.beans.factory.annotation.InitDestroyAnnotationBeanPostProcessor.postProcessBeforeInitialization(InitDestroyAnnotationBeanPostProcessor.java:136)
    at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyBeanPostProcessorsBeforeInitialization(AbstractAutowireCapableBeanFactory.java:408)
    at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1570)
    at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:545)
    at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:482)
    at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:306)
    at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:230)
    at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:302)
    at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:202)
    at org.springframework.beans.factory.config.DependencyDescriptor.resolveCandidate(DependencyDescriptor.java:207)
    at org.springframework.beans.factory.support.DefaultListableBeanFactory.findAutowireCandidates(DefaultListableBeanFactory.java:1214)
    at org.springframework.beans.factory.support.DefaultListableBeanFactory.doResolveDependency(DefaultListableBeanFactory.java:1054)
    at org.springframework.beans.factory.support.DefaultListableBeanFactory.resolveDependency(DefaultListableBeanFactory.java:1019)
    at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredFieldElement.inject(AutowiredAnnotationBeanPostProcessor.java:566)
    ... 33 more
Caused by: org.springframework.dao.QueryTimeoutException: ORA-01654: unable to extend index PROTECT.SYSTEMEVENT_FB4A by 128 in tablespace USERS
; SQL [n/a]; nested exception is org.hibernate.QueryTimeoutException: ORA-01654: unable to extend index PROTECT.SYSTEMEVENT_FB4A by 128 in tablespace USERS

    at org.springframework.orm.jpa.vendor.HibernateJpaDialect.convertHibernateAccessException(HibernateJpaDialect.java:265)
    at org.springframework.orm.jpa.vendor.HibernateJpaDialect.translateExceptionIfPossible(HibernateJpaDialect.java:244)
    at org.springframework.orm.jpa.JpaTransactionManager.doCommit(JpaTransactionManager.java:521)
    at org.springframework.transaction.support.AbstractPlatformTransactionManager.processCommit(AbstractPlatformTransactionManager.java:761)
    at org.springframework.transaction.support.AbstractPlatformTransactionManager.commit(AbstractPlatformTransactionManager.java:730)
    at org.springframework.transaction.interceptor.TransactionAspectSupport.commitTransactionAfterReturning(TransactionAspectSupport.java:483)
    at org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:290)
    at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:96)
    at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
    at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:655)
    at com.vontu.enforce.domainlayer.events.system.SystemEventLogger$$EnhancerBySpringCGLIB$$f967d9fd.logEvent(<generated>)
    at com.vontu.config.manager.crypto.ManagerKeyIgnitionHandler.onKeysIgnited(ManagerKeyIgnitionHandler.java:55)
    at com.vontu.enforce.domainlayer.crypto.impl.KeyIgnitionFactoryBean.performKeyIgnition(KeyIgnitionFactoryBean.java:93)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at org.springframework.beans.factory.annotation.InitDestroyAnnotationBeanPostProcessor$LifecycleElement.invoke(InitDestroyAnnotationBeanPostProcessor.java:365)
    at org.springframework.beans.factory.annotation.InitDestroyAnnotationBeanPostProcessor$LifecycleMetadata.invokeInitMethods(InitDestroyAnnotationBeanPostProcessor.java:310)
    at org.springframework.beans.factory.annotation.InitDestroyAnnotationBeanPostProcessor.postProcessBeforeInitialization(InitDestroyAnnotationBeanPostProcessor.java:133)
    ... 46 more
Caused by: org.hibernate.QueryTimeoutException: ORA-01654: unable to extend index PROTECT.SYSTEMEVENT_FB4A by 128 in tablespace USERS

    at org.hibernate.exception.internal.SQLStateConversionDelegate.convert(SQLStateConversionDelegate.java:151)
    at org.hibernate.exception.internal.StandardSQLExceptionConverter.convert(StandardSQLExceptionConverter.java:49)
    at org.hibernate.engine.jdbc.spi.SqlExceptionHelper.convert(SqlExceptionHelper.java:125)
    at org.hibernate.engine.jdbc.spi.SqlExceptionHelper.convert(SqlExceptionHelper.java:110)
    at org.hibernate.engine.jdbc.internal.proxy.AbstractStatementProxyHandler.continueInvocation(AbstractStatementProxyHandler.java:129)
    at org.hibernate.engine.jdbc.internal.proxy.AbstractProxyHandler.invoke(AbstractProxyHandler.java:81)
    at com.sun.proxy.$Proxy142.executeBatch(Unknown Source)
    at org.hibernate.engine.jdbc.batch.internal.BatchingBatch.performExecution(BatchingBatch.java:110)
    at org.hibernate.engine.jdbc.batch.internal.BatchingBatch.doExecuteBatch(BatchingBatch.java:101)
    at org.hibernate.engine.jdbc.batch.internal.AbstractBatchImpl.execute(AbstractBatchImpl.java:161)
    at org.hibernate.engine.jdbc.internal.JdbcCoordinatorImpl.executeBatch(JdbcCoordinatorImpl.java:162)
    at org.hibernate.engine.spi.ActionQueue.executeActions(ActionQueue.java:357)
    at org.hibernate.engine.spi.ActionQueue.executeActions(ActionQueue.java:275)
    at org.hibernate.event.internal.AbstractFlushingEventListener.performExecutions(AbstractFlushingEventListener.java:326)
    at org.hibernate.event.internal.DefaultFlushEventListener.onFlush(DefaultFlushEventListener.java:52)
    at org.hibernate.internal.SessionImpl.flush(SessionImpl.java:1214)
    at org.hibernate.internal.SessionImpl.managedFlush(SessionImpl.java:403)
    at org.hibernate.engine.transaction.internal.jdbc.JdbcTransaction.beforeTransactionCommit(JdbcTransaction.java:101)
    at org.hibernate.engine.transaction.spi.AbstractTransactionImpl.commit(AbstractTransactionImpl.java:175)
    at org.hibernate.ejb.TransactionImpl.commit(TransactionImpl.java:75)
    at org.springframework.orm.jpa.JpaTransactionManager.doCommit(JpaTransactionManager.java:517)
    ... 63 more
Caused by: java.sql.BatchUpdateException: ORA-01654: unable to extend index PROTECT.SYSTEMEVENT_FB4A by 128 in tablespace USERS

    at oracle.jdbc.driver.OraclePreparedStatement.executeBatch(OraclePreparedStatement.java:12296)
    at oracle.jdbc.driver.OracleStatementWrapper.executeBatch(OracleStatementWrapper.java:246)
    at com.vontu.util.jdbc.LoggingStatement.executeBatch(LoggingStatement.java:212)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at org.hibernate.engine.jdbc.internal.proxy.AbstractStatementProxyHandler.continueInvocation(AbstractStatementProxyHandler.java:122)
    ... 79 more

Currently i work on the implementation about Symantec VIP, but i dont have infraestructure to install in one server EG and other Active directory, i was look for to information where it saye if install EG and Active Directory server is supported when bout are in the same server.

some one installed symantec vip the this way?

Regards!!

Hi All,

I am new her, glad to join symantec community.

I have a pre-sales case, we have a customer who has proxysg s600 which is EOL, 

he needs extension for his BCWF license?

what is the preferred solution for him?

1) can I give him new license for BCWF and can work on this EOL appliance?

2) or the license can not work? and the preferred is to go with new replacement for the whole solution as S200?

or the both can be?

Please help me.

Thanks in advance

After upgrading to 14.2 the daily status report no longer shows systems when expanded in the emailed version on the virus definition distribution. The systems are visible when the report is run locally on the admin console.

I have run the report locally.
Recreated the same scheduled report with the same results
Tried to open the open the emailed HTML file in Chrome and IE on Windows 10 and Windows 7

I have attached screenshots of the emailed html file and the server generated report.

Has anyone else seen this issue or found a fix? I am unable to find a technical article regarding this exact issue.

We have the need to break our current single tier, enforce and oracle on same server, to a 2-tier install.  What is the best plan of action on this?  

i have and issue with all pc have symantec , i cannot download address list from email server to my outlook . i try another pc no have antivirus software is ok . 

Please help me to fix it. 

Thanks !

Hi,

I downloaded the Windows 10 Enterprise Aniversarry Edition 1803 patch via PM Import. Both the ISO and the Bat file came down but the bat file does not appear to execute the ISO patch. When I compared the code in the Bat file from the prior 1703 patch that came down via PM Import the code in the bat file was drastically different.

This leads me to belive that the code in the bat file that is part of the patch is broken. Below is the code in the bat file for the new 1803 patch.

Is this bat file in the patch broken or am I missing something here?

undefined

Hi!

I try to use Directory Servers synchronisation to use my AD account for SEPM.

It's working OK only over unsecure connection. When I check "Use Secure Connection" I got error:

Server AD has open 636 port.

When deleting a machine from our web console it disables the AV service, but does not uninstall the agent completely. I found the article below, but this isn't working for us. Is there a switch for the uninstall.exe that will accomplish this so I can perform it through the Symantec Management Platform?

https://www.symantec.com/connect/forums/silent-uni...