ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

About upgrading to Symantec Endpoint Protection Manager (SEPM) 14.3 RU1 and the un-installation of the Symantec EDR Synapse Log Collector and embedded SEPM database

book

Article ID: 199062

calendar_today

Updated On:

Products

Endpoint Detection and Response

Issue/Introduction

If you upgrade to Symantec EDR 4.5 or later, Symantec EDR automatically re-establishes the database connection to the Microsoft SQL Server database.  You might see a connection error in Symantec EDR while the re-configuration to MS SQL Server database occurs.  If the issue persists, you can manually configure the MS SQL Server database connection in the Symantec EDR appliance console. 

 

Cause

SEPM no longer supports the Symantec EDR embedded database or the Synapse Log Collector. 

Environment

Symantec EDR appliances

Resolution

If you continue to use Symantec EDR 4.4 or earlier after you upgrade to SEPM 14.3 RU1, SEPM uninstalls the SEPM embedded database and the Synapse Log Collector.  Symantec EDR no longer receives logs from SEPM until you do either of the following tasks:

  • Upgrade to Symantec EDR 4.5 (upon upgrade, Symantec EDR automatically configures the connection to the MS SQL Server database).   For the connection to be automatically re-established, you must also have SEPM Controller connection for same SEPM server. 
  • Add a new connection and remove the existing one.  Preferably, edit the existing connection and change the type to MS SQL.

Note:  If a self-signed certificate was used in the embedded database setup, the connection appears in the EDR appliance console as "Unencrypted".  See the Symantec EDR documentation for information about how to encrypt the MS SQL database.  

Additional Information

Symantec EDR continues to support the Synapse Log collector for the embedded database for customers who use SEPM 14.3 MP1 and earlier.

If you use the MS SQL Server database before you perform either upgrade (SEPM or Symantec EDR), no changes are required. See the Symantec EDR documentation for more information.

https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-detection-and-response/4-5.html