Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

"Antivus status: Invalid" since upgrade to SEP 12.1

Created: 19 Aug 2011 | 8 comments
JoshuaT's picture
0 0 Votes
Login to vote

After upgrading 2 clients to SEP 12.1 one of them is experiencing an issue with a custom application that sends email on her behalf.  When this action is attempted she receives a Microsoft Office Outlook popup that states, "A program is trying to access data from Outlook that may include address book information.  Do you want to allow this?"  She has two options Allow or Deny.

In researching why this message is now appearing I have found that its because Windows isnt detecting any valid Antivirus products on the computer.  To verify I opened Outlook 2007 > Tools > Trust Center > Programmatic Access.  At the bottom of this setting it shows if your AV is valid.  This one computer shows, "Antivirus status: Invalid. This version of Windows supports antivirus detection, but no antivirus was found"

This issue did not occur when SEP 11 RU6 was installed.  Now that this client runs SEP 12.1 the problem exists.  Opening the SEP client on this computer I can see it updating and running its morning scans as our policy indicates. So it appears to be working.

The other computer that was upgrade to SEP 12.1 has no problems, and the Antivirus status shows Valid.

I ran diagnostics in Outlook 2007 (Help > Office Diagnostics) and no problems were found.

I am going to remove SEP 12.1 and then re-push it back out from the Console, but I am curious if anybody else is experiencing this issue.

Joshua

 

 

 

Comments

James-x's picture
19
Aug
2011
0 Votes 0
Login to vote

What does the Windows

What does the Windows Security Center say? (This is called the Windows Action Center on Windows 7.) Does it report that Symantec Endpoint Protection is functioning as the AV?

I would suspect that Outlook should be keying off whether the Security Center/Action Center recognizes the AV.

If that is not working for some reason, then Outlook could easily report missing AV.

Just a thought.

James

The Symantec Endpoint Protection Knowledgebase

Please remember to mark the post which resolved your issue as the solution!

James-x's picture
19
Aug
2011
0 Votes 0
Login to vote

Also, it appears that there

Also, it appears that there are others out there who have experienced this issue, albeit with SEP 11.x.

For example, the following thread: https://www-secure.symantec.com/connect/forums/antivirus-status-invalid

James

The Symantec Endpoint Protection Knowledgebase

Please remember to mark the post which resolved your issue as the solution!

JoshuaT's picture
19
Aug
2011
0 Votes 0
Login to vote

Security Center

Security Center shows "Symantec Endpoint Protection is on but is reporting its status to Window Security Center in a format that is no longer supported.  Use the pgoram's automatic updating feature, or contact the program manufacturer for an updated version"

I will now be opening a ticket with Symantec.

Thank you for your assistance.

James-x's picture
22
Aug
2011
0 Votes 0
Login to vote

Thanks for the update,

Thanks for the update, JoahuaT.

I did some searching and found the following document: http://www.symantec.com/docs/TECH166164

You might reference that document ID (TECH166164) to the technical support engineer who helps you. It may speed up your resolution.

James

The Symantec Endpoint Protection Knowledgebase

Please remember to mark the post which resolved your issue as the solution!

James-x's picture
22
Aug
2011
0 Votes 0
Login to vote

I just tried out my link and

I just tried out my link and it's not working for some reason. Perhaps our KB software is having an issue.

In case the link doesn't work tomorrow, I'll copy and paste the text to you here.

James

 

Title
After upgrade from SEP 12 to SEP 12.1, Windows Security Center reports SEP status in not supported format.
Problem
Upgrading SEP 12.0 SBE to SEP 12.1 cause in Windows Security center INFO:
 
"Symantec Endpoint Protection" is active. But it's status is reported to Windows Security Center in not supported format.
Please use Auto Update feature of this program or contact the vendor."
 
Environment
German Windows 7 Professional 32bit.
 
Cause
It seems to be an issue on application layer API between Win 7 and SEP Client.
 
Solution
You can set the Windows Security Center to ignore this notification. 
 
Another option:
- Uninstall and install SEP 12.1 manually.
- wait for SEP 12.1 version RU1 103 built that solves this issue.
 
If there are many clients:
1. Create a new SEP 11 Installation pakage in the group and delete the original installation package. This will reinstall (repair) the clients.
2. After this, change the installation packages to  SEP 12.1  and SEPM will autoupgrade the clients.

The Symantec Endpoint Protection Knowledgebase

Please remember to mark the post which resolved your issue as the solution!

JoshuaT's picture
23
Aug
2011
0 Votes 0
Login to vote

Solved

I removed the install package and created a new one in the management console.  The package removed the client and repushed it.  However this time the AV is properly reporting in Windows Security Center.

There must have been an error during the initial installation.

James-x's picture
23
Aug
2011
0 Votes 0
Login to vote

Good. That matches the

Good. That matches the resolution described in the document I linked.

I'm glad it's working for you.

James

The Symantec Endpoint Protection Knowledgebase

Please remember to mark the post which resolved your issue as the solution!

Hear4U's picture
10
Oct
2011
0 Votes 0
Login to vote

check out this info

Here's some info from our support dB that may be helpful:

 

http://bit.ly/rhlXfS  - upgrading and migrating to SEP 12.1

http://bit.ly/o5LTnR - upgrading to a new release of SEP

http://bit.ly/peVT7X  - upgrade resources for SEP

 

Let us know how things are going!

Eric

Subscribe to the upcoming Security Newsletter - Log in, visit your profile, and click on "Newsletter Subscriptions!"