Endpoint Protection

 View Only
Back to discussions
Expand all | Collapse all

31/12 Issue - Automatic Liveupdate (from the Internet) of clients breaks internal update

  • 1.  31/12 Issue - Automatic Liveupdate (from the Internet) of clients breaks internal update

    Posted Jan 11, 2010 06:36 AM
    Hello everyone,

    i configured my locations like that if there is no connection to the corporate network what so ever it automatically loads the definitions directly from the internet liveupdate server (at 6pm +-2 hours).

    Now some clients have the recent updates with the right name (eg 2010-01-09 rev 017). Problem is: When they connect to the corporate network the next day they don't get updates from the SEPM servers (because they have updates dated 2009-31-12 rev 121)

    So .. how do i get these clients back ? (Or do i have to wait until the fix is out ?)

    Greets
    Stephan


  • 2.  RE: 31/12 Issue - Automatic Liveupdate (from the Internet) of clients breaks internal update

    Posted Jan 11, 2010 07:11 AM
     You will have to wait till the fix is out.

    The Client is having latest update of 2010 however SEPM will be showing 2009 updates.So the client will think SEPM has old definition update as the definition pattern file of client and SEPM is matched and which is latest is applied.
    So once the definition date of SEPM is fixed then only clients will get the latest updates from SEPM.


  • 3.  RE: 31/12 Issue - Automatic Liveupdate (from the Internet) of clients breaks internal update

    Posted Jan 11, 2010 08:18 AM
    Has anyone tried removing the definition files?
    I didn't get the 12/31 update. I was on vacation. :)
    I'd like to get the executable update file to do some testing if that would work.


  • 4.  RE: 31/12 Issue - Automatic Liveupdate (from the Internet) of clients breaks internal update

    Posted Jan 11, 2010 09:22 AM
    I've verified this problem in our environment as well.   Laptop computers are configured to update from Symantec's website when they are not connected to our corporate default gateway via location awareness.     Can we get a timeline on when the SEPM patch will be released for MR4 MP2?     Also, will there be any risk of corrupt defintions attempting to downgrade from the Live Update date to the 12/31/09 xxx version?    


  • 5.  RE: 31/12 Issue - Automatic Liveupdate (from the Internet) of clients breaks internal update

    Posted Jan 11, 2010 10:40 AM
    SEPM have problem. If you use LUA, your client can update with 2010 definitons. You can read the theard: http://www.symantec.com/connect/forums/sepm-update?page=1, i think more infomation you need.

    -J


  • 6.  RE: 31/12 Issue - Automatic Liveupdate (from the Internet) of clients breaks internal update

    Posted Jan 11, 2010 01:32 PM
    So is there a way to simply have the SEPM and GUPs "forget" about their current 2009 pattern files so that they can get 2010 pattern files?


  • 7.  RE: 31/12 Issue - Automatic Liveupdate (from the Internet) of clients breaks internal update

    Posted Jan 11, 2010 01:35 PM
     GUPs can forget but SEPM can't.
    Its bug in SEPM that it cannot show 2010 definition. Due to some programming patern matching error it shows that 2010 definitions are older than 2009 defs.
    Symantec is currently working on ( working really hard ) to get a fix released shortly via Liveupdate that will fix this problem in SEPM. Once thats fixed everything will be fine.


  • 8.  RE: 31/12 Issue - Automatic Liveupdate (from the Internet) of clients breaks internal update

    Posted Jan 12, 2010 04:57 AM
    Ok so i just need to wait.

    Is there a place where i can leave my email address to get notified if the fix has been released ?

    Thanks
    Stephan


  • 9.  RE: 31/12 Issue - Automatic Liveupdate (from the Internet) of clients breaks internal update

    Posted Jan 12, 2010 05:00 AM
    https://www-secure.symantec.com/connect/forums/sepm-update?page=6

    open this thread on the both there is a notification button..check it..you will be notified for every update on this issue. 


  • 10.  RE: 31/12 Issue - Automatic Liveupdate (from the Internet) of clients breaks internal update

    Posted Jan 12, 2010 05:08 AM

    Any idea where could be the fault???

    Symantec is being questioned..

    Hope for the betterment.

     



  • 11.  RE: 31/12 Issue - Automatic Liveupdate (from the Internet) of clients breaks internal update

    Posted Jan 13, 2010 12:12 PM
    Any estimate on when MR4 MP2 SEPM patch will be released?   I saw that MR3 was released today and then RU5 after that.   Many of our laptops have updated via the Internet while away from our network and now they won't update via SEPM.   The longer it takes for the patch to be released poses a greater risk to these computers that are not updating.  


  • 12.  RE: 31/12 Issue - Automatic Liveupdate (from the Internet) of clients breaks internal update
    Best Answer

    Posted Jan 16, 2010 06:43 PM
     Update 16-JAN-2010

    https://www-secure.symantec.com/connect/downloads/sepm-patch-definition-issue - video highlighting the Patch

    Patches for the following builds:

    SEPM MR3 (11.0.3001.2224)
    SEPM MR4 (11.0.4000.2295
    SEPM MR4 MP1 (11.0.4010.19)
    SEPM MR4 MP1a (11.0.4014.26)
    SEPM MR4 MP2 (11.0.4202.75)
    SEPM RU5 (11.0.5002.333)

    have been posted on the LiveUpdate servers.

    Reminder: Do not downgrade to get this patch.

    Please refer to the following KB document for details regarding this issue:

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2010010308571348