After upgrade Symantec Endpoint Protection (SEP) client to 14.2 or newly installed 14.2, SEP client is showing as offline in SEP client GUI. However, SEP clients is showing as online in Symantec Endpoint Protection Manager (SEPM).
Host name of SEP client machine contains DBCS (Double Byte Character Set) character, such as Japanese.
cve.log:
[2018-Jul-26 16:00:25.149763] [DEBUG] Attempting to get Index2.xml file.
[2018-Jul-26 16:00:25.149763] [DEBUG] Current system proxy is:
[2018-Jul-26 16:00:25.149763] [DEBUG] Providing both CAs (In-Memory) to CURL library
[2018-Jul-26 16:00:25.149763] [DEBUG] Setting CURL to use system proxy =
[2018-Jul-26 16:00:25.165376] [DEBUG] CertificateProvider Begins
[2018-Jul-26 16:00:25.165376] [DEBUG] CertificateProvider Finished
[2018-Jul-26 16:00:25.165376] [DEBUG] Received a HTTP_PRECON_FAILED response
[2018-Jul-26 16:00:25.165376] [DEBUG] XYXYXYXYXYXYX rri PURGED
[2018-Jul-26 16:00:25.165376] [INFO ] Attempting re-registration
exsecars-a.log:
07/26 16:00:24 [4132:6556] <CHttpRequest::HttpExtensionProc> [###.###.###.###] GET h=...
07/26 16:00:24 [4132:6556] <CHttpRequest::HttpExtensionProc> [###.###.###.###] DecodedRequest: l=431&action=12&hostid=...<็ฅ>
07/26 16:00:24 [4132:6556] Param 12: ใในใ142
07/26 16:00:24 [4132:6556] SendIndexFileToClient: ###.###.###.### GetIndex 412 Register again
Symantec Endpoint Protection 14.2
Host name of SEP client contains DBCS character.
This issue is fixed in Symantec Endpoint Protection 14.2 RU2. For information on how to obtain the latest build of Symantec Endpoint Protection, see Download the latest version of Symantec software here.