Endpoint Protection

 View Only

  • 1.  64 clients virus definitions unable to update

    Posted Aug 23, 2007 04:53 AM
    Hi,
       I am having an issue on the above subject. I have setup a Symantec SSC running on Windows2003EE R2 32bit. The version of SSC is 10.1.5.5002 and the SAV is 10.1.5.5000. I have 2 client machines one of which is a 32bit Windows2003EE R2 32bit and another is Windows2003EE R2 64bit. The SAV (Symantec AntiVirus Server) which is on the same machine as my SSC is updated with one of the latest virus definitions. When i deployed to the 2 clients machines the 32bit machine reflects the same definition date as with the SAV but the 64bit machine definition date still remains as of 2006. I tried to push the updates from SSC to it but despite repeated attempts unsuccessfull.

    I read this post => https://forums.symantec.com/syment/board/message?board.id=endpointcust&message.id=551 which is similar to my case except his client is vista64bit. I have read from some forums that 64bit clients were not able to retrieve updates from parent server as it is not supported. Is this true?

    Best rgds,
    KCK


  • 2.  RE: 64 clients virus definitions unable to update

    Posted Aug 24, 2007 01:36 PM
    Hi KCK,
     
    I had the same issue with two Windows Server 2003 Std R2 64-Bits a few weeks ago. On the servers I saw one error on the System Log that states:
     
    Source: SAVRT
    Event ID: 30
    Description: Unable to determine de location of the virus definition files.
     
    The procedure that I follow to resolve the problem was:
     
    1.- Completely uninstall Symantec AV Client on two servers (from Add or Remove Programs -- remove Symantec Antivirus Win64, restart, and then remove LiveUpdate 3.2... Restart again).
    2.- Go to the SSC on your main server and do the Remote Client Install again.
    3.- Wait a few minutes (without restarting the server)... And the Client take the updated virus definitions from Parent Server (if all is configured to do so).
     
    Please, let me know if this works for you... Regards,
     
    AAAISBSVE
    Symantec Services Partner
     
     
     
    .
     

     



  • 3.  RE: 64 clients virus definitions unable to update

    Posted Aug 24, 2007 06:15 PM
    Hi,
    if you follow the following steps .... you will be able to update virus definitions on 64 bit clients...
     
    To manage 64-bit clients with the Symantec System Center
    Create a client group.
    Right-click the client group.
    Uncheck Inherit settings from Server Group.
    Right-click the client group, and then select All Tasks > Symantec AntiVirus > Virus Definition Manager.
    In the Virus Definition Manager dialog box, uncheck Update virus definitions from parent server.
    Do one or both of the following:
    Uncheck Do not allow client to manually launch LiveUpdate.
    Check Schedule client for automatic updates using LiveUpdate, click Schedule, specify a schedule, and then click OK.
    Click OK
    After you install 64-bit client software, drag the client computers into this client group.<!-- Reuse end -->
    If the 64-bit clients do not appear in the client group, confirm that Symantec System Center is set to show clients in client groups.
    To show clients in client groups in Symantec System Center
    In Symantec System Center, click Tools > SSC Console Options.
    Do one of the following, depending on your program version:
    For Symantec AntiVirus 10.x, on the Client Display tab, check Show client computers when viewing client groups.
    For Symantec AntiVirus 9.x, on the Client Filter tab, check Show client machines when viewing Groups.
    Click OK.
     
    regards
     
    goddie:smileyvery-happy:


  • 4.  RE: 64 clients virus definitions unable to update

    Posted Aug 26, 2007 10:38 AM
    Hi AAAISBSVE,
       thanks for your resolution but apparently it doesn't work for my case. The 64bit Windows2003 client still appears as old definitions (dated 09-08-2006). I check on the client side event viewer and my message is as below.

    SOURCE: Symantec AntiVirus
    EVENT ID: 16
    Download of virus definition file from LiveUpdate server failed.  00000001

    Best rgds,
    KCK


  • 5.  RE: 64 clients virus definitions unable to update

    Posted Aug 26, 2007 11:14 AM
    Hi goddie,
       i saw this suggestion before and tried out.

    1. By not inheriting from the parent server means any new definitions updates on the server will not be propogate to the 64 bits clients.
    2. Check Schedule client for Automatic updates using LiveUpdate.

    This means that the 32bits will be updated by the parent server but 64bits needs to connect to the internet Symantec website to manually download the definitions using LiveUpdate feature. Is that what you meant?

    My Point is to manually download the virus definition files from Symantec website in the form of xdb format. This downloaded file is then placed in c:\program files\SAV folder. I was unable to use LiveUpdate feature as the SAV server will never be able to connect to internet due to my client security policy restrictions. This function has serve well for 32bits clients but not for 64bits client. What i wish is that by updating the SAV server with the latest definitions in the form of xdb files all the clients will get updated.

    Nobody is using SAV v10 to protect their 64bit clients? Am i the only one having this problem? Any suggestions?

    Best rgds,
    KCK


    Message Edited by corona on 08-26-200708:27 AM



  • 6.  RE: 64 clients virus definitions unable to update

    Posted Oct 22, 2007 10:31 AM
    Hello,
    I'm having exactly the same issue and it is still unresolved.
    One thing I can add (maybe it's your case too) is that, in addition to the event viewer message saying that updates could not be downloaded (error 0x0000001), I have another "Information" messsage saying (translating from the Italian version, probably it's not the exact message test in English) that there is a problem with current virus definitions and the server will switch back to the more recent valid ones (which means middle 2006).
    Hope someone can help us.


  • 7.  RE: 64 clients virus definitions unable to update

    Posted Oct 22, 2007 11:51 AM
    Corona, your understanding appears to be correct.  I have come across this issue in my environment as well.  64-bit clients must use live update to get their definitions.  This seems to be a short coming in v10.  I've been told by Symantec that v11 will be able to update 64bit clients but have yet to test this theory.  I have also been told as an alternative you could setup a local live update server, and point your clients live update setting to your local live update server.  I've never done this, so no input on how well it works.


  • 8.  RE: 64 clients virus definitions unable to update

    Posted Jul 09, 2009 05:56 AM
    I followed the below steps and the issue got resolved.

    1. Go to "C:\Program Files (x86)\Symantec AntiVirus"
    2. Open "VPDN_LU.exe"
    3. Click on option menu -> Configure
    4. Select "HTTP"
    5. Select the radio button "I want to customize my HTTP settings for LiveUpdate"
    6. In "HTTP Proxy Settings" -> Select Checkbox "Use a proxy server for HTTP connections".
    7. Provided our proxy IP at "Address" text box, and "Port" text box is filled with 80.