The Symantec Endpoint Protection Manager (SEPM) console stops responding, and client-server communications fail. There are one or more .mdmp files in the C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tomcat\bin folder.

The following error appears in the Windows event log:

System Error Service Control Manager 7031 The Symantec Endpoint Protection Manager service terminated unexpectedly. It has done this 30 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Application Error Application Error 1000 "Faulting application name: SemSvc.exe, version: 14.2.1023.100, time stamp: 0x5bc37a68 Faulting module name: ntdll.dll, version: 10.0.14393.2485, time stamp: 0x5b84c483 Exception code: 0xc0000374 Fault offset: 0x00000000000f7b43 Faulting process id: 0x8fc Faulting application start time: 0x01d4723b30c5043e Faulting application path: F:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tomcat\bin\SemSvc.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll Report Id: 47a1e31f-6b08-4384-ab5e-a2a4ae6e8e82 Faulting package full name: Faulting package-relative application ID:"

Pre-14 RU1 clients with DefWatch issues are flooding AgentOptState. This results in the database exception handling creating a connection leak.

This issue is fixed in Symantec Endpoint Protection 14.2 RU1. For information on how to obtain the latest build of Symantec Endpoint Protection, see Download the latest version of Symantec Endpoint Protection.