Customer is upgrading Symantec Endpoint Protection Manager (SEPM) to 14.2 MP1 version. Database schema upgrade failed with "Error occured" in dialog and "java.lang.ArrayIndexOutOfBoundsException: Array index out of range: 0" in upgrade.log
Upgrade wizard shows "Error occurred"
SEPM Upgrade log has the below exception:
2019-02-26 19:19:07.126 THREAD 22 SEVERE: java.lang.ArrayIndexOutOfBoundsException: Array index out of range: 0 2019-02-26 19:19:07.126 THREAD 22 SEVERE: at java.util.Vector.get(Vector.java:751) 2019-02-26 19:19:07.126 THREAD 22 SEVERE: at com.sygate.scm.server.upgrade.SchemaLamborghiniRU1MP2ToRainier.addIpv6HostsToFirewallRules(SchemaLamborghiniRU1MP2ToRainier.java:454) 2019-02-26 19:19:07.126 THREAD 22 SEVERE: at com.sygate.scm.server.upgrade.SchemaLamborghiniRU1MP2ToRainier.upgrade(SchemaLamborghiniRU1MP2ToRainier.java:187) 2019-02-26 19:19:07.141 THREAD 22 SEVERE: at com.sygate.scm.server.upgrade.SchemaUpgrade.execute(SchemaUpgrade.java:99) 2019-02-26 19:19:07.141 THREAD 22 SEVERE: at com.sygate.scm.server.upgrade.Upgrade.doUpgrade(Upgrade.java:1813) 2019-02-26 19:19:07.141 THREAD 22 SEVERE: at com.sygate.scm.server.upgrade.ui.UpgradeTask.go(UpgradeTask.java:137) 2019-02-26 19:19:07.141 THREAD 22 SEVERE: at com.sygate.scm.server.upgrade.ui.UpgradeProgressPanel$2.construct(UpgradeProgressPanel.java:250) 2019-02-26 19:19:07.141 THREAD 22 SEVERE: at com.sygate.scm.util.SwingWorker$2.run(SwingWorker.java:153) 2019-02-26 19:19:07.141 THREAD 22 SEVERE: at java.lang.Thread.run(Thread.java:748) 2019-02-26 19:19:07.141 THREAD 22 SEVERE: Upgrade.doUpgrade java.lang.ArrayIndexOutOfBoundsException: Array index out of range: 0
SEPM 14.0x
Windows Server 2012
During upgrade, the issue occur when adding the IPv6 range hosts in the firewall rule with host list.
It is expecting there is at least one in "Local/Remote".
Invalid size of the Host container in the Remote Host of the firewall rule.
This issue is fixed in Symantec Endpoint Protection 14.2 RU1 MP1. For information on how to obtain the latest build of Symantec Endpoint Protection, see Download the latest version of Symantec software here.”
We have the following workarounds as well:
1) Locate the rule in firewall policy with IPv6 range hosts in firewall policy, edit the Host list and change the radio button to "Local/Remote". Then, immediately run the upgrade. Revert back to "Source/Destination" immediately after upgrade.
2) Delete that rule before upgrade.