Checking Symantec Endpoint Protection agent connection status via Windows Registry

Products

• Endpoint Protection

Issue/Introduction

You want to check the Symantec Endpoint Protection agent connection status, using Windows Registry.

Resolution

Locate the following Registry Key:

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink\CommunicationStatus

Example Value:

1772737394;XXX;1772737394;XXX;443;0;0;;1

Breakdown:

1772737394 - last successful connection in Epoch format

XXX - SEPM hostname

443 - communication port

1772737394 - last attempted connection in Epoch format

XXX - SEPM hostname

443 - communication port

0,0 - these are error codes 

1 - connection status: online ("0" means offline)

 

This is the exact same information, which is available in the SEP agent GUI (Help > Troubleshooting > Server Connection Status):