## Services running on the client and the server

You can monitor the following services on the Symantec Endpoint Protection client. Stop and start events for these services are also written to the Windows Event Log, but we recommend that you monitor the services directly.

Table: Symantec Endpoint Protection client services

Service Name | Service Description
--- | ---
SepMasterService; display name Symantec Endpoint Protection | Provides virus-scanning for Symantec Endpoint Protection
SmcSrvice; display name Symantec Management Client | Provides communication with Symantec Endpoint Protection Manager. Also provides Network Threat Protection and Application and Device Control for the client.
SNAC; display name Symantec Network Access Control | Checks that the computer complies with the defined security policy and communicates with the Symantec Enforcers to allow your computer to access the corporate network.

You can monitor the following services on the management server:

Table: Management server services

Service Name | Service Description
--- | ---
SQLANYs_sem5; display name Symantec Embedded Database | Embedded database used by Symantec Endpoint Protection Manager
Note: | This service is not useful if Symantec Endpoint Protection Manager is installed with a SQL Server database.
semsrv; display name Symantec Endpoint Protection Manager | Application server which communicates with Symantec Endpoint Protection Manager, Symantec Protection clients, and a database.
semwebsrv; display name Symantec Endpoint Protection Manager Webserver | Apache/2.2.21.5 (Win32) mod_ssl/2.2.21.5 OpenSSL/0.9.8r mod_fcgid/2.3.6.5
Note: | Stopping or starting this service also stops or starts semsrv. This service is therefore the most useful for direct monitoring.