search cancel

Host integrity scan failed on Endpoint Protection Agent

book

Article ID: 229867

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

Host integrity (HI) policy is configured to fail if Antivirus definitions are not updated for a certain duration (As per the specified number of days or weeks in 'Antivirus Signature file checking' in HI policy configuration ). 

Symantec Endpoint Protection (SEP) agent has the latest definitions, still HI scan is failing for "SEP requirements"

You may see the following error in the SEP security log:

Timestamp Event Severity Remote IP RemoteHostname Local IP Protocol Direction Description Type Start Time End TimeCount Application Location User Name Domain Name Remote MAC Address LocalMAC Address Data
8/24/2021 3:44:34 PM Host Integrity Failed Minor 0.0.0.0 0.0.0.0None Unknown "Host Integrity check failed
 Requirement: ""SEP Requirement"" failed
" 0 8/24/2021 3:44:23 PM 8/24/2021 3:44:23 PM 1 ITC Others->Quarantineerafugar ILTDGUNFS001 00-00-00-00-00-00 C4-6C-65-52-20-F1 "FV=1.0
R=""SEP Requirement""^S=start
RT=Antivirus
C=av_is_running^S=fail^T=""Symantec Endpoint Protection""
R=""SEP Requirement""^S=fail
"

Cause

symvpn.dll is missing in Windows folder

Resolution

Copy the symvpn.dll file from the SEP folder to the Windows folder.

- For 32 bit systems: 

From C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.3.3385.1000.105\Bin\symvpn.dll to c:\windows\syswow64\

- For 64 bit Systems:

From C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.3.3385.1000.105\Bin64\symvpn.dll to c:\windows\system32\