Endpoint Protection

Team,

i had manually update the SEP manager server . But strange is that its almost hours and clients half of the clients has received updates of latest definition and half has not . But the policy is working fine on the system .

check if the other half is communicating with the manager
right click on group and select update content

Are you getting green dot on those clients?Whether they are in LAN or in WAN?

Also tell us are you finding any similarity between those problematic clients---present in same group,belongs to same subnet ,update has to receive from same GUP etc.....

They are on lan few of them  are geeting green dot except one system on which i am  getting red dot .

In that computer go  to help and support-->troubleshooting and see what is the server name and group.It is correct?

Follow the below link to repair the Live Update:

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007100907303548

If this didn't solve the issue, you should maually remove the liveupdate downloaded files from the SEPM. To do so, follow the blow link:

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007123111551948

Hi Arvind ,

Server which are not receiving updates belongs to the proper server  and group also .   When i click on the troubleshooting it showing the server ip address not the server name . And the server who are suppose to receive updates from GUP are successfully getting updated with the latest dat version .  

Even i manually update the SEP AV system which are getting update through GUP had received the latest patch of 31 st july and it is showing updated . But few system which are directly receiving updates from SEP . Are  not showing updated ver .

Attached is the screen shots .  I try option update content on the group of the client system .

Hi Raffeq ,

Hi Arvind ,

Systems which are not receiving updates belongs to the proper server  and group also .   When i click on the troubleshooting it showing the server ip address  . And the server who are suppose to receive updates from GUP are successfully getting updated with the latest dat version .  

Even i manually update the SEP AV system which are getting update through GUP had received the latest patch of 31 st july and it is showing updated . But few system which are directly receiving updates from SEP . Are  not showing updated version .

Attached is the screen shots .  I try option update content on the group of the client system

In SEPM go to Admin-->servers-->local site---->show live update downloads.Check wheter both 32 bit and 64 bits are up to date.Also tell us the problematic clients are 32 bit or 64 bit?

Both the 32 and 64 clients are not receiving updates successfully .  Please suggest

Which is the version you are using?Whether your GUP PC and clients having same policy sl. no?

I am using SEP 11.0.6005 ver and GUP and clients having same policy .  Even i try re installing and installing . But no luck .

From the problematic client are you able to telnet to GUP on 2967 port?

Arvind,

Problematic client are  getting updates directly  from SEP server .  Clients whcich are getting updates from GUP are working fine .

run sylink monitor on client having the issue and post the logs here

Once again you verify your LU policy .Assure that you are selected only default management server option.....
Also pls attach the sylink log...

Arvind,

Use the default management server (windows computers only) is selected

use liveupdate server is selected

use the symantec live update server live update server is sellected .

How can i get the syslink log . It is the same file you are talking about under C:\program files\Symantec\Symantec Endpoint Protection\Syslink.xml

Select only Use the default management server option uncheck all others...

For slink logs refer this KB
SylinkWatcher and SylinkMonitor - tools for real-time debugging of SPA 5.x and SEP 11.x

Arvind ,

When i try to open the link . It is giving me the error while opening the page . Website cannot display . Website under maintanance .  Pease send me the content in the body if you have one .

Sorry I do not have one..I think KB site is under maintenance.Try after some time....

Arvind , Still it is showing Website under maintannece

I think somebody form Symantec will give us the answer for this...

Have you performed the below link to wipe out the corrupt deffinintions in SEPM?

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007123111551948

Hi Pete ,

Please find the logs .

I able to download the log files through the process suggest by Prachand .  Below is the method

Check whether your SEPM server is running.Login to SEPM and see whether your client are showing online there?

Arvind ,

Only one system it is showing green dot and when i check that system it showing the proper latest update and also communicating with the server . In that same system it is showing the server name in the server in the trouble shooting tab.

Rest of the other system have just the computer icon .  Please suggest

Hi Farzad,

I had manually removed the corrupt definition files from client systems .  After when i open the symantec console on client system .it is showing no updated definition files it is taking from server . . Server is showing online in the sep management console . I can ping the sep server also . Please suggest that my client should start receving updated definition from server . Is their any repair tools . I try unistalling and installing also .