Endpoint Protection

My clients are pulling the Proactive Threat Protection and Network Threat Protection updates, but for some reason the Antivirus and Antispyware Protection will not update to the current definition file. My SEP Manager Console has pulled the latest definitions from the LiveUpdate Server, but my clients are not receiving that particular update. Any ideas?

You need to check if SEPM has 32 bit defs

Click on Admin
Click on SERVERS
Highlight local site ( or right hand top)
at the bottom click on option show liveupdate downloads

check if you have latest 32bits ,,defs availabe..if not u need to follow all the steps..its from one of forum link..


File system cleanup for 32-bit SESC Virus Definitions:

1. Stop SEPM server service.

2. Go to C:\program files\symantec\symantec endpoint protection manager\Inetpub\content\{C60DC234-65F9-4674-94AE-62158EFCA433}" folder and move all of the subfolders to another place, such as C:\Temp if you want a backup, otherwise delete the sub-folders.

Database cleanup for 32-bit SESC Virus Definitions:

3) Go to C:\Program Files\Common Files\Symantec Shared\SymcData\ and delete the following folders:
sesmipsdef32
sesmipsdef64
sesmvirdef32
sesmvirdef64

4)In the registry, navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\InstalledApps.
Delete these keys
SymcData-sesmipsdef32
SymcData-sesmipsdef64
SymcData-sesmvirdef32
SymcData-sesmvirdef64

5). In the registry, navigate to and delete the following keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs\SymcData-sesmipsdef32
HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs\SymcData-sesmipsdef64
HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs\SymcData-sesmvirdef32
HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\SharedDefs\SymcData-sesmvirdef64

6). Start the SEPM service back up.

7). Run Live update from within the Symantec Endpoint Protection Management console.

This will re-populate the database which in turn will update the moniker folders.

Let me know if you have 32bits downloaded in your SEPM or not??


 

I believe I have the 32 bit def.

In the Show LiveUpdate Downloads, it says:

             Virus and spyware definitions Win32 11.0 MicroDefsB.CurDefs     with a revision date of 2009-08-31

Thats what you mean right?

After looking at more of the clients (some 64 bit, some 32 bit) it seems a few have updated. But the majority have not. They just won't pull the Antivirus and Antispyware Protection def file.   

Refer to this KB -

Troubleshooting Content Delivery to the Symantec Endpoint Protection client

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008092511045348

Let me know if this is helpful.

Thomas

Cycletech,

Sorry this did not help. Whats odd is that some machines, like my Exchange server, have pulled the latest Antivirus and Antispyware update but some other clients will not. Is there anything specific I need to be looking for?