Monitoring Server Health on Symantec Endpoint Protection Manager

Products

• Endpoint Protection

Issue/Introduction

Symantec Endpoint Protection Manager (SEPM) performance is less than expected, or the SEPM experiences intermittent errors. What can be checked to determine if there are any underlying issues?

 

Resolution

The SEPM includes a Server Health notification as a System Default, that you can review or modify on the SEPM. This can be useful in identifying underlying issues. This Site Status Report can swiftly identify if the server is affected by persistent or intermittent underlying resource issues. (For example, insufficient hard drive space or RAM.)

The default SEPM Server Health notification will log and send an email to system administrators when server health becomes poor, and you can modify the default configuration if desired for your environment

To review or modify the Server Health notification on the SEPM:

1. In the SEPM console, click on Monitors
2. Select the Notifications tab
3. Click on the Notification Conditions section in the lower right area
4. Select Server Health, then Edit
5. Modify the Notification name if desired
6. Modify the Damper value (how often alerts should be raised), value if desired
7. Configure what actions should be taken when notification is triggered (server health becomes poor)
8. Click OK

The notification mails will arrive at the configured mailbox with the subject "Server Health Alert." The Server Health Alert is written to the database, and each server health alert will also be listed among the notifications for the SEPM.

To run a Site Status Report one time:

1. In the SEPM console, click on Reports
2. In Quick Reports tab, choose Report Type: System
3. In the Select a report: section select Site Status
4. Click Create Report

The results are displayed on screen, and can be saved as a report.html file, or printed for later examination.

Example from running the Reports>Quick Reports>Report type: System>Select a report: Site Status:

 

The report also contains specific server-related information:

To run a Site Status Report on a schedule:

1. In the SEPM console, click on Reports
2. Select the Scheduled Reports tab, click Add
3. Type a name for the report and description, if desired
4. Choose Report Type: System Report
5. In the Selected report: select Site Status Report
6. Schedule how often you would like to have the scheduled report run
7. Enter an email address that the reports should automatically be mailed to, if desired
8. Click OK

How to test communication from an Endpoint Protection client to the Endpoint Protection Manager?
https://support.symantec.com/en_US/article.TECH102682.html

Can Symantec Endpoint Protection Manager be monitored by Microsoft Operations Manager (MOM)?
https://support.symantec.com/en_US/article.TECH105164.html

Technical Information:

The SEPM should perform well on a server that has ample resources available. These server health notifications and reports can highlight underlying issues which would prevent the SEPM from functioning well.