Checking the status of Symantec Endpoint Protection (SEP) client to SEP Manager through registry key
The SEP client to SEPM connection status is indicated by one of the following 7 values in 32-bit DWORD key HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink\HeartbeatResult:
Value | Profile Routine Status | Details |
---|---|---|
0 | PROFILE_ROUTINE_NO_CONNECTION | Failed to create a connection to Endpoint Protection Manager. |
1 | PROFILE_ROUTINE_CONN_REJECTED | The connection attempt was rejected (possibly, the Endpoint Protection Manager server is down). |
2 | PROFILE_ROUTINE_NO_NEW_PROFILE | The profile update completed successfully. There was no new profile to be downloaded. |
3 | PROFILE_ROUTINE_DOWNLOAD_FAILED | There was a new profile to be downloaded, but the download failed. |
4 | PROFILE_ROUTINE_APPLY_FAILED | The new profile downloaded successfully, but failed to apply. |
5 | PROFILE_ROUTINE_OK | The profile update completed and was applied successfully. |
99 | PROFILE_ROUTINE_PENDING | An initial value set prior to the first heartbeat –added to prevent erroneous logging if the Sylink constructor is called and a heartbeat has not yet taken place, from 12.1 RU1 onward. Should change to one of the aforementioned values after the first heartbeat. |
For versions 14.2 and newer, status can be found from "HKEY_LOCAL_MACHINE\
The list of values is as follows:
COMM_SUCCESS = 0 INTERNAL_ERROR = 100 OUT_OF_MEMORY_ERROR = 101 NETWORK_CONNECTION_ERROR = 102 CONNECTION_LOST_ERROR = 103 CONNECTION_TIMEOUT_ERROR = 104 NAME_NOT_RESOLVED_ERROR = 105 SERVER_UNREACHABLE_ERROR = 106 SECURITY_CERTIFICATE_ERROR = 107 CONNECTION_ABORTED_ERROR = 108 BAD_REQUEST_ERROR = 109 FORBIDDEN_ERROR = 110 SERVER_ERROR = 111 CREATE_REQUEST_ERROR = 112 REGISTRATION_ERROR = 113 INDEX_FILE_ERROR = 114 UNKNOWN_NETWORK_ERROR = 115 UNKNOWN_APPLICATION_ERROR = 116 UNKNOWN_HTTP_ERROR = 117 NO_ONLINE_NIC_ERROR = 118