Would virus def. 4/28/14 r16 protect against Bloodhound.Flash.24 or do I need 4/30/14 r2 ?

For some reason I cant update my SEPM to the latest ver. Never had an issue before - maybe because everyone is trying to download?

You need to update, see here:

http://www.symantec.com/security_response/writeup.jsp?docid=2014-042909-5556-99

April 29, 2014 revision 008 is the first to offer protection against it.

Also, first discovered April 29th so April 28th defs would not protect against it.

I should have added that this is SEPM 12.1.1

Definitely need to update your content :)

Its saying - no updates found for symantec endpoint protection manager catalog 12.1

However manager virus ver is 4/28/14 r16

Latest should be 4/30/2014 r2

http://www.symantec.com/security_response/definitions.jsp

You can RUN live update manually

Downloading LiveUpdate content manually to Symantec Endpoint Protection Manager

http://www.symantec.com/business/support/index?page=content&id=HOWTO80806

You can update the defintion manually on infected system if you not want to update the sepm.(.exe from link)

If possible then update the defintion on sepm. (.jdb from link)

http://www.symantec.com/security_response/definitions/download/detail.jsp?gid=sep

Yeah I tried to run LU but having issues. It wont update???? this is a first

can you use the jdb file and also look into Liveupdate log/

Can you update the jdb file?

What the issue while run LU?

Also: I recommend using IPS as well as AV and ensuring that all releases of Flash used throughout your organization are updated.  There is a latest version available now from Adobe which is not vulnerabile to that zero-day, and there are also IPS signatures against malicious Flash exploit traffic.

More info:

Adobe Patches Exploited Flash Player Vulnerability
https://www-secure.symantec.com/connect/blogs/adobe-patches-exploited-flash-player-vulnerability

Many thanks!

Mick

LU worked but I am having a strange issue. This morning new virus def. never downloaded. When I look at the schedule I have it set for start 2:00AM end 4:00AM daily but when I look in show LU status its saying next LU time is today at 11:30:59AM. Any ideas? I rebooted everything and no change.

See this article for schedule the exact to download

Configuring the LiveUpdate download schedule for Symantec Endpoint Protection Manager