Unable to load the sisap and sisevt modules on Ubuntu 5.4.0-67-generic ,Ubuntu 20.04.
sdcss_install.log
03/23/21 16:29:18: Installing packages for Symantec Agent for Linux (SEPM):
03/23/21 16:29:18: Package Version Source
03/23/21 16:29:18: ---------------------------------------- --------------- ------
03/23/21 16:29:18: sdcss-caf 2.0.1.203 (repo)
sdcss-sepagent 6.8.2.457 (repo)
sdcss-kmod 10.0.1.900 (repo)
Reading package lists...
Building dependency tree...
Reading state information...
The following packages were automatically installed and are no longer required:
galera-3 libcgi-fast-perl libcgi-pm-perl libconfig-inifiles-perl
libdbd-mysql-perl libdbi-perl libencode-locale-perl libfcgi-perl
libhtml-parser-perl libhtml-tagset-perl libhtml-template-perl
libhttp-date-perl libhttp-message-perl libio-html-perl
liblwp-mediatypes-perl libterm-readkey-perl libtimedate-perl liburi-perl
libzip5 mariadb-common php7.4-pgsql php7.4-tidy php7.4-xmlrpc socat
Use 'apt autoremove' to remove them.
The following NEW packages will be installed:
sdcss-caf sdcss-kmod sdcss-sepagent
N: Ignoring file 'sdcss.list.prev' in directory '/etc/apt/sources.list.d/' as it has an invalid filename extension
0 upgraded, 3 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B/54.8 MB of archives.
After this operation, 0 B of additional disk space will be used.
Selecting previously unselected package sdcss-caf.
(Reading database ...
(Reading database ... 5%
(Reading database ... 10%
.....
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 123682 files and directories currently installed.)
Preparing to unpack .../sdcss-caf_2.0.1.203_amd64.deb ...
Unpacking sdcss-caf (2.0.1.203) ...
Setting up sdcss-caf (2.0.1.203) ...
Symantec Agent for Linux CAF installed successfully.
Preparing to unpack .../sdcss-sepagent_6.8.2.457_amd64.deb ...
Unpacking sdcss-sepagent (6.8.2.457) ...
Setting up sdcss-sepagent (6.8.2.457) ...
Selecting previously unselected package sdcss-kmod.
(Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
...
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 124029 files and directories currently installed.)
Preparing to unpack .../sdcss-kmod_10.0.1.900_amd64.deb ...
kmod_preinstall found response file /etc/sisips/sdcss-agent.response
Unpacking sdcss-kmod (10.0.1.900) ...
Setting up sdcss-kmod (10.0.1.900) ...
Error: Ubuntu kernel version 5.4.0-67-generic is not supported
Error: : error driver_version: Unable to identify driver file for "sisevt"
Symantec Agent for Linux kmod package installed successfully.
Processing triggers for systemd (245.4-4ubuntu3.5) ...
03/23/21 16:29:52: Messages from installation of agent:
ERROR: driver_version: Unable to identify driver file for "sisevt"
03/23/21 16:29:52:
Agent installed successfully
Mar 23 16:29:53 epdwr1n systemd[1]: Starting Symantec Agent for Linux IPS daemon...
Mar 23 16:29:53 epdwr1n systemd[1]: Started Symantec Agent for Linux IPS daemon.
03/23/21 16:29:56:
Module status:
03/23/21 16:29:56: ------ sisevt status not loaded
03/23/21 16:29:56: ------ sisap status not loaded
03/23/21 16:29:49: install_kmod.. running driver setup
03/23/21 16:29:50: : error driver_version: Unable to identify driver file for "sisevt"
03/23/21 16:29:50: Pre-install KMOD version file missing, could not update correct KMOD release in sis-version.properties
Daemon status-
1 S dcscaf 11320 1 0 80 0 - 637680 do_sig 51868 3 Mar23 ? 00:06:02 /opt/Symantec/cafagent/bin/cafservicemain --daemon
5 S root 11330 1 0 80 0 - 580399 futex_ 473328 3 Mar23 ? 00:18:37 /opt/Symantec/sdcssagent/AMD/bin/sisamddaemon
5 S root 11399 1 0 80 0 - 316917 poll_s 9508 3 Mar23 ? 01:37:51 /opt/Symantec/sdcssagent/IDS/bin/sisidsdaemon
1 S sisips 11421 1 0 80 0 - 98999 hrtime 11296 3 Mar23 ? 00:29:12 /opt/Symantec/sdcssagent/IPS/bin/sisipsdaemon
sisap_init.log
03/23/21 16:29:53: sisap module unsupported for kernel version 5.4.0-67-generic.
03/23/21 17:17:44: sisap module unsupported for kernel version 5.4.0-67-generic.
03/23/21 17:18:11: sisap module unsupported for kernel version 5.4.0-67-generic.
Symantec Endpoint Protection (SEP) 14.3 RU1.
Known Issue
Issue fixed in SEP 14.3 RU2.
- Upgrade SEP client to 14.3 RU2 to fix it.