ATP UI shows internal error with the Synapse when enabling correlation with the SEPM DB.  Whne un-checking the Synapse correlation, after a few seconds the screen refreshes. The box still shows checked with the internal error. (Note: See Error Message section.)

If  the 'Internal Error' shows under the Synapse "Enable Symantec Endpoint Protection Correlation" and the SEPM DB shows a green Healthy status then perform these steps.

1. Uncheck the box next to "Enable Symantec Endpoint Protection Correlation" and wait a few minutes.
2. If the screen has not refresh then press the 'F5' key to refresh.
3. If the box comes back check with the 'Internal Error' then log into the command line (CLI) as the admin account and run a "gather_logs".  This will upload the logs to the Telemetry site.  Provide the Support team with the Universal Unique Identifier (UUID) which can be obtain from the ATP UI. 
   1. Log into the ATP UI.
   2. Click on the [Settings] -> [Appliances] -> under Appliances click on the appliance.
   3. At the top to the right shows [APPLIANCE ID]. Please write down or take a screen shot of UUID. 
4. Open up a support case with Symantec Support and provide the UUID to the support team so they can pull down the logs from the Telemetry site.

Note: Tier 1 please check the Internal Notes for next steps.