Manually Applying the 2010 definitions patch to Symantec Endpoint Protection Manager (SEPM)

Article:TECH122476  |  Created: 2010-01-15  |  Updated: 2010-01-21  |  Article URL http://www.symantec.com/docs/TECH122476
Article Type
Technical Solution


Environment

Issue






Solution



Patch Installation Instructions:

    Note: By default, the SEPM server will download and apply the patch automatically. This takes a total of three LiveUpdate cycles.
    The SEPM downloads the patch on the first LiveUpdate session after the patch is made available, updates its Content Catalog on the first LiveUpdate session
    after the patch is applied and downloads 2010 dated definitions on the third LiveUpdate session. This occurs without any user interaction over approximately 12 hours (assuming the default 4 hour LiveUpdate interval - 4 hours x 3 LiveUpdate sessions = 12 hours).

    For LiveUpdate Users:
    If you do not wish to wait for the SEPM to download and apply the patch, new Content Catalog, and Content Updates, follow the instructions below. These instructions must be followed on each SEPM server in the enviroment.
      1. Download and install the patch:
        1. Click the Admin tab in the SEPM interface
        2. Click the Servers tab and select the Local Site from the View Servers list
        3. Click Download LiveUpdate Content in the Tasks pane
        4. Click the Download button on the Download LiveUpdate Content window
        5. After LiveUpdate completes, the SEPM Service will restart, necessitating logging back in to the SEPM Console
      2. Update the SEPM's Content Catalog:
        1. Click the Admin tab in the SEPM interface
        2. Click the Servers tab and select the Local Site from the View Servers list
        3. Click Download LiveUpdate Content in the Tasks pane
        4. Click the Download button on the Download LiveUpdate Content window
        5. After LiveUpdate completes, the SEPM will now have an updated Content Catalog including the information necessary to download 2010 definitions
      3. Update the SEPM's Content Cache:
        1. Click the Admin tab in the SEPM interface
        2. Click the Servers tab and select the Local Site from the View Servers list
        3. Click Download LiveUpdate Content in the Tasks pane
        4. Click the Download button on the Download LiveUpdate Content window
        5. After LiveUpdate completes, the SEPM will now have 1 set of Antivirus and Antispyware definitions with a 2010 date
      For a video demonstrating this sequence, view Symantec Endpoint Protection Definition Patch http://www.symantec.com/connect/videos/symantec-endpoint-protection-definition-patch.


    Manual Patching Instructions:
    Only follow these instructions on SEPM servers which are not able to connect to LiveUpdate to download the patch (ie. SEPMs that are manually updated via JDB files), or have been manually configured to not download SEPM patch content.

    Note:
    These steps are not necessary on SEPM servers that are updated via LiveUpdate unless the SEPM has been specifically configured not to download SEPM Product updates via LU
      1. Apply the patch:
        1. Download the manual patch
          1. SEP 11.x: SEPServerPatch-v6.01.exe (SEPServerPatch-v6.01.exe : SHA1 - C5F6CC5FA3C5B1FE47066CD3FF5645D688339CE2)
          2. SEP 12.x SBE: SEPServerPatch-v7.01.exe (SEPServerPatch-v7.01.exe: SHA1 - 9CE3EBAC823A518C6859D894C5A0EFFAF95B2C5E)
        2. Execute the patch directly on each affected SEPM server
      2. For LiveUpdate users:
        1. Update the SEPM's Content Catalog:
          1. Click the Admin tab in the SEPM interface
          2. Click the Servers tab and select the Local Site from the View Servers list
          3. Click Download LiveUpdate Content in the Tasks pane
          4. Click the Download button on the Download LiveUpdate Content window
          5. After LiveUpdate completes, the SEPM will now have an updated Content Catalog including the information necessary to download 2010 definitions
        2. Update the SEPM's Content Cache:
          1. Click the Admin tab in the SEPM interface
          2. Click the Servers tab and select the Local Site from the View Servers list
          3. Click Download LiveUpdate Content in the Tasks pane
          4. Click the Download button on the Download LiveUpdate Content window
          5. After LiveUpdate completes, the SEPM will now have 1 set of Antivirus and Antispyware definitions with a 2010 date
      3. For JDB users:
        After applying the patch, no further configuration is required to apply JDB-based definitions with a 2010 date.



References
Security Content for Symantec Endpoint Protection clients and Symantec Endpoint Protection Managers are dated Dec 31 2009 even when using the latest definitions

http://service1.symantec.com/support/ent-security.nsf/docid/2010010308571348




Legacy ID



2010011512020748


Article URL http://www.symantec.com/docs/TECH122476


Terms of use for this information are found in Legal Notices