Endpoint Protection

I got a SEP MR4 installed.

Works fine untill last week, when the Virus Definition stop show the bars.
The IPS bars appears OK, also Latest Symantec and Manager Definition.

If I try to run a report about the Definitions, returns 0 computers.

All my clients are showing the virus definitino at Client Windows.

Some idea?

I`m using the embedded data base....

This could be a corrupted virus defs, please try re-lauching liveupdate on the server and make sure it is completed.

Pauli is right on the corrupted virus definition. But I think it would be better if you do a manual update on the PC in question. But since you mentioned that this only happened after updating to MR4. Then the problem lies when you installed the patch.  Have you tried doing a push update? What happens if so.

 Could it be a a LU issue and/or a reporting issue as his reports are the ones which dont show up anything

My update runs every 2 hours.

I have a clean MR4 instalation, so a update from previous versions isn't the answer.
I'm using GUP at remote clients, and the local client (around 250) are direct connecting to Manager.

I also notted that all my client status reports besides IPS definitions are blank. I can't even mark a acknowledge risk at my site.
Done the manual update at manager and replying to my clients, but I don't think that will solve this isue.

Hi, so you are updated on the clients? So the problem now is with the reporting right? What version of SEP are you using? Can you upgrade to mr4 mp1a?

I will try update the manager to mp1a.
I have tryed run the configuration wizard again to rebuild the database, but was usuless.

I got the mp1 media and will try to download de mp1a.

Hi Marlon, while waiting for your mp1a, can you verify that you can see your clients on the SEPM console? When you ran the confi wizard you did not encounter any setup erros?

Hi Paul

All my clients are visible at SEPM. Also all show me what virus definition and futeres are installed.
When I ran the config wizard, there is no errors. I also have recreated the ODBC link and testes OK.

Hmmm, ok last, can you try to restart the SEPM Server service and java? What version of JRE are you using? can you reinstall?

I've already tried to restar services and the server him self.

I'm using the JRE installed with Symantec Manager.
If I try to access the reports using the browser, I also got the 0 computers and blank reports.

Can you just try to create a client report inventory, and see if sees any computers?

All 0.

I'll try to update my manager server and whait to the clients to replicate and see what happens.

After update, same problem.

I got Risk per hour, infected and other reports, but non of computer status reports... All return 0 or empty reports to me.

Ok, I have isolated the problem.

When I ran a report, and set to show me only online value, the reports works fine, also show me the Virus Definitions.

I have saved the Default filter using the Online value, but I still can't see any information at Home screen. When a group of 11 machines with IPS installed are online, the home IPS works fine, but if just one shutdown, it's goes blank again.

Have you already updated to mp1a?

Yes.

My manager are mp1a, and I have 10 clients also mp1a to test.

I can't understand why my home can't use the default report like the others reports.
Even if I set at preferences to user Filter, the report come blank. If I use report or monitor windows, the reports works fine.

Did you just overinstall?

I did the update.

The clients I have uninstalled and installed the new version.

Can this link..

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/0289373bffc1c628882573df00766710?OpenDocument

I have configured this.

Also tryed to set the Local System user to run the web applications.
I have verified if the php-cgi.exe is correct configured.

But I think if was user permissions or php issues, any report will run, and if I set the report to scan online, the result will be 0 too.

I have no more ideiasm hopefully, this error will "disapear" with time...
I can't see any log with an error or somethink...

If the reports were oopened for the first time, you may see a blank page. Wait for it to gather enough data to work with. That happened to me on one of our servers, I just waited for it to fill up. What's the update?

Novice here, How do you move the defs from the server to the client. I cant get a portion of our machines to update. If I have to ill do 1 by one. I guess im working harder not smarter but ill get the job done as soon as I know how. THanks

@chriss72: I suggest that you setup a group update policy. Go to SEP Manager Console (SEPM) and click on clients, select the client group that you want updating. Right-click, Run command on client, Update content.

Or,

After clicking on client, and selecting a group, click on the policies tab on the right window pane, select LiveUpdate Settings policy, then do your configuration there to automate it.