SEP Firewall 12.1.5337.5000 does not comply with policy

[Aarx_]

Yes, the EXE installed fine on their system and they tried to re-login but failed with the same error, unfortunately I didn't ask for the debug file after that.

The clients are from Germany and won't be available now, is there anything else that I should test tomorrow apart from the asking for the debugfile?

[Kita_]

Not at this point, we will need to confirm if it is getting past the setup client or not.  My assumption is that we should be getting further and running into another issues.

[Aarx_]

OK, BTW I'm going to change the logging level on user's computer too tomorrow to get more detailed logs, I'll update them too here.

Thanks so much for your help.

[Aarx_]

Hi All,

Sorry, it took bit time to get time to get these logs, PFA the detailed logs for hostchecker.

Thanks

[Kita_]

It looks like host checker is launching and sending results to the SA/MAG.  It seems this is an issue with OPSWAT SDK not being able to detect the software.  Is this issue happening on multiple devices?  Please run the ESAP Diagnostic Tool on a working and non-working machine.  The tool can be downloaded at:

https://www.juniper.net/support/downloads/?p=esap#sw

Please ensure to open a support ticket so we can properly track this issue.  Also, please let me know the ticket number once it is created.

[Chetan_67_]

Hi,

I am Chetan Savade from Symantec Technical Support Team.

It seems SEP is not causing any issue here however I just wanted to make you aware that in SEP 12.1.5337.5000 (RU5) Host integrity policy is newly added in this version. By default it's not assigned to any group.

Host Integrity policy has been added uner Polices, SEPM --> Policies --> Host Integrity

Host Integrity, Peer-to-peer enforcement, and Quarantine policies, formerly part of Symantec Network Access Control, are now available for all users, regardless of whether or not they had purchased a SNAC license. This change does not grant users access to the NAC portion of the product, which still requires a Network Enforcer and a SNAC license that has been purchased separately. It should also be noted that this change does not apply to the Small Business Edition version of the SEP product. There is no actual change in Host Integrity or SNAC functionality related to this enhancement

Best Regards,

Chetan