Symantec Endpoint Protection for Macintosh: "Date of Last Update" in LiveUpdate interface may be incorrect

Article:TECH181009

Created: 2012-02-08

Updated: 2012-09-07

Article URL http://www.symantec.com/docs/TECH181009

Article Type
Technical Solution

Product(s)

Show all

Languages

Show all

Problem

Symantec Endpoint Protection for Macintosh: "Date of Last Update" in LiveUpdate interface is wrong.

Error

LiveUpdate logging indicates that new definitions have recently been downloaded and applied, but the "Date of Last Update" in the LiveUpdate interface on the client has not changed. You can tell when new definitions have been download in liveupdt.log when you see a series of file extractions like the following:

Feb 7, 2012 11:01:09 AM Extracting virscan.974
Feb 7, 2012 11:01:09 AM Total number of bytes read is 202
Feb 7, 2012 11:01:09 AM Extracting virscan1.973
Feb 7, 2012 11:01:09 AM Total number of bytes read is 1,761
Feb 7, 2012 11:01:09 AM Extracting virscan2.972
Feb 7, 2012 11:01:09 AM Total number of bytes read is 4,349
etc...
Feb 7, 2012 11:01:10 AM Unzipping completed
Feb 7, 2012 11:01:10 AM Making /private/tmp/liveupdate/1328630462989/1328630469216/mdefs.sh executable ...
Feb 7, 2012 11:01:10 AM Running /private/tmp/liveupdate/1328630462989/1328630469216/mdefs.sh ...
Feb 7, 2012 11:01:10 AM
Feb 7, 2012 11:01:10 AM The Java LiveUpdate session has completed successfully.
Feb 7, 2012 11:01:10 AM Return code = 0

Note that "Date of Last Update" in LiveUpdate interface is the date when an update was applied--it does not necessarily reflect the actual date/revision of the definitions file that was downloaded. In the logged session above, for example, the "Virus Definitions File" date in the SEP client GUI was Monday, February 6, 2012 but "Date of Last Update" in LiveUpdate interface was January 31, 2012 (it should have been February 7).

Environment

Symantec Endpoint Protection client on Macintosh OS X.

Cause

Symantec is aware of this issue and is researching it.

Note that even though "Date of Last Update" may not change, the client interface's "Virus Definitions File" date should reflect what SEP is currently using.

Solution

This article will be updated as new information becomes available.

Supplemental Materials

Source	ETrack
Value	2685484
Description	SEP for Macintosh: "Date of Last Update" in LiveUpdate interface is not correct