search cancel

Host integrity scan failed on Endpoint Protection Agent


Article ID: 229867


Updated On:


Endpoint Protection


Host integrity (HI) policy is configured to fail if Antivirus definitions are not updated for a certain duration (As per the specified number of days or weeks in 'Antivirus Signature file checking' in HI policy configuration ). 

Symantec Endpoint Protection (SEP) agent has the latest definitions, still HI scan is failing for "SEP requirements"

You may see the following error in the SEP security log:

Timestamp Event Severity Remote IP RemoteHostname Local IP Protocol Direction Description Type Start Time End TimeCount Application Location User Name Domain Name Remote MAC Address LocalMAC Address Data
8/24/2021 3:44:34 PM Host Integrity Failed Minor Unknown "Host Integrity check failed
 Requirement: ""SEP Requirement"" failed
" 0 8/24/2021 3:44:23 PM 8/24/2021 3:44:23 PM 1 ITC Others->Quarantineerafugar ILTDGUNFS001 00-00-00-00-00-00 C4-6C-65-52-20-F1 "FV=1.0
R=""SEP Requirement""^S=start
C=av_is_running^S=fail^T=""Symantec Endpoint Protection""
R=""SEP Requirement""^S=fail


symvpn.dll is missing in Windows folder


Copy the symvpn.dll file from the SEP folder to the Windows folder.

- For 32 bit systems: 

From C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.3.3385.1000.105\Bin\symvpn.dll to c:\windows\syswow64\

- For 64 bit Systems:

From C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.3.3385.1000.105\Bin64\symvpn.dll to c:\windows\system32\