Unexpected Server Errors reported by manager, with ScanTableHandler errors in scm-server-0.log

Products

• Endpoint Protection

Issue/Introduction

The Symantec Endpoint Protection Manager (SEPM) reports Unexpected Server Errors, and you see errors related to ScanTableHandler in scm-server-?.log matching any of the following:

SEVERE: ScanTableHander insert exception:String or binary data would be truncated.

java.sql.BatchUpdateException: Cannot insert the value NULL into column 'EVENT_SOURCE', table 'dbo.AGENT_SYSTEM_LOG_1'; column does not allow nulls. INSERT fails.

SEVERE:  in: com.sygate.scm.server.logreader.sep.BatchLogHandler java.sql.SQLException: Invalid data for the specified data type. Column Index: 15, type=4, value: www

WARNING: Error during AV record processing: com.sygate.scm.server.logreader.ParseException (7): Invalid log record:  String found instead of integer.

 

Cause

This is caused by malformed data coming from the endpoints.  Typically this is seen with older versions of the SEP client, particularly pre-14.3 RU6 Mac clients.

Resolution

Update all endpoints in the environment to 14.3 RU8 or newer.