Symantec Endpoint Protection for Macintosh: "Date of Last Update" in LiveUpdate interface may be incorrect

Article:TECH181009  |  Created: 2012-02-08  |  Updated: 2013-11-06  |  Article URL http://www.symantec.com/docs/TECH181009
Article Type
Technical Solution


Issue



Symantec Endpoint Protection for Macintosh: "Date of Last Update" in LiveUpdate interface is wrong.


Error



LiveUpdate logging indicates that new definitions have recently been downloaded and applied, but the "Date of Last Update" in the LiveUpdate interface on the client has not changed. You can tell when new definitions have been download in liveupdt.log when you see a series of file extractions like the following:

Feb 7, 2012 11:01:09 AM Extracting virscan.974
Feb 7, 2012 11:01:09 AM Total number of bytes read is 202
Feb 7, 2012 11:01:09 AM Extracting virscan1.973
Feb 7, 2012 11:01:09 AM Total number of bytes read is 1,761
Feb 7, 2012 11:01:09 AM Extracting virscan2.972
Feb 7, 2012 11:01:09 AM Total number of bytes read is 4,349
etc...
Feb 7, 2012 11:01:10 AM Unzipping completed
Feb 7, 2012 11:01:10 AM Making /private/tmp/liveupdate/1328630462989/1328630469216/mdefs.sh executable ...
Feb 7, 2012 11:01:10 AM Running /private/tmp/liveupdate/1328630462989/1328630469216/mdefs.sh ...
Feb 7, 2012 11:01:10 AM
Feb 7, 2012 11:01:10 AM The Java LiveUpdate session has completed successfully.
Feb 7, 2012 11:01:10 AM Return code = 0

Note that "Date of Last Update" in LiveUpdate interface is the date when an update was applied--it does not necessarily reflect the actual date/revision of the definitions file that was downloaded. In the logged session above, for example, the "Virus Definitions File" date in the SEP client GUI was Monday, February 6, 2012 but "Date of Last Update" in LiveUpdate interface was January 31, 2012 (it should have been February 7).


Environment



Symantec Endpoint Protection client on Macintosh OS X.


Cause



This issue is resolved in Symantec Endpoint Protection 12.1 RU4 for Macintosh.

Note that even though "Date of Last Update" may not change, the client interface's "Virus Definitions File" date should reflect what SEP is currently using.


Solution



Upgrade to SEP for Macintosh version 12.1 RU4.


Supplemental Materials

SourceETrack
Value2685484
Description

SEP for Macintosh: "Date of Last Update" in LiveUpdate interface is not correct



Article URL http://www.symantec.com/docs/TECH181009


Terms of use for this information are found in Legal Notices