A Symantec Endpoint Protection Manager (SEPM) has multiple NICs. One of these NIC addresses is either not used, or not reachable by Symantec Endpoint Protection clients and should not be used by the SEPM for communication with the clients. The information for this incorrect NIC needs to be removed from the SEPM.
12.1 Small Business edition:
As designed. This is a limitation of 12.1 small business edition manger it will not allow to specify or edit a management server list, it will make all IP addresses bound to that server available to the clients. The only work-arounds are:
Install the SEPM on another server that does not use multiple NICs
Uninstall the manager without backing up, remove the invalid NIC, reinstall the manager, then re-add the NIC. This should force the manager to only see/use the proper NIC. However, this is unsupported and has not been tested.
11.0.x - 12.1.x Enterprise Edition:
To change the IP address that clients use to communicate with the Symantec Endpoint Protection Manager, create a Management Server List that has the new IP address configured and assign that list to all groups.
In the SEPM console, click Policies.
Under View Policies, click Policy Components.
In the list that appears, click Management server lists.
Check the port value for the SEPM server in the Default management server list It would be listed as xxx.xxx.xxx.xxx:8014, where 8014 is the port value.
Under Tasks, click Add a Management server list.
Give the new Management Server List a name (and description if desired).
Choose HTTP or HTTPS protocol.
In Management Servers, on the right, click Add, slide over and choose New Server.
Enter the New IP address that will be assigned to the SEPM server.
If there is a port value listed in Default Management Server List, check Customize HTTP port or Customize HTTPS port and enter a port value.
If there is no port value listed in Default Management Server List. then confirm that Customize HTTP port is unchecked.
Repeat 8-9 if you want to reference the same server by host name of the server, for step 9, enter the server name instead of IP address.
Click on OK to confirm.
Right click on the new management server list and assign it to the appropriate groups.
Note: If clients were not communicating with SEPM at the time the management server list was assigned, copy a new sylink.xml file out to the clients that were communicating with the wrong ip address.
Imported Document ID: TECH169379
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe