Auto-protect Status Component is Malfunctioning and Unable to initialize scan engine

Products

• Endpoint Protection
• Endpoint Security
• Endpoint Security Complete

Issue/Introduction

• After installing the SEP agent on Linux servers, their client status shows Auto-protect Status-> Component is Malfunctioning.
• sudo ./sav info -d shows scan engine not initialized:

  Command failed: Unable to initialize scan engine

Environment

• Symantec Endpoint Protection
• Linux

Cause

The device has not received any definitions, so it's unable to initialize auto protect.

Resolution

1. Review the LiveUpdate log file to check the connection method the client is attempting to use.
   • /opt/Symantec/sdcssagent/AMD/sef/Logs/lux.log
2. Troubleshoot and resolve any network, firewall, or proxy configuration issues blocking communication with https://liveupdate.symantec.com or the specified Live Update Administrator (LUA) server.
3. Restart the sisamdagent service to trigger an automated LiveUpdate attempt upon startup:

   systemctl restart sisamdagent