Endpoint Protection

 View Only
Back to discussions
Expand all | Collapse all

Clients not Update Virus Definition from Server

Migration User

Migration UserFeb 14, 2012 12:03 PM

Its not a Proxy issue.
Migration User

Migration UserFeb 14, 2012 09:21 PM

Any suggestion Please...
pete

peteFeb 14, 2012 09:35 PM

can you pass on the liveupdate log?

  • 1.  Clients not Update Virus Definition from Server

    Posted Feb 14, 2012 10:05 AM

    Hello People

    I have a issue with my SEP Server. I download the Virus definition and I see the New Virus Definition on my Manage Console Home Page but is not deployed to himself and to clients. all my clients have the Green Dot on the SEP Icon.

    Im stuck on January 31 2012 virus Definition. I run the LUALL but it's said No Virus Definition Found for Windows 32/64

    Any suggestion?

     



  • 2.  RE: Clients not Update Virus Definition from Server

    Posted Feb 14, 2012 10:14 AM

    Please check the following article, which should resolve your issue.

    http://www.symantec.com/business/support/index?page=content&id=TECH166923

     

    Hope that helps.



  • 3.  RE: Clients not Update Virus Definition from Server

    Posted Feb 14, 2012 10:26 AM

    Do you have this link in English? Please

    I dont understand the Chinesse



  • 4.  RE: Clients not Update Virus Definition from Server

    Posted Feb 14, 2012 10:47 AM

    That is the english link.

    I have the same problem every now and again, when opening an article it defaults to Chinese.  I am not sure why.

    When that happens, I have to purge all my IE cache or open in another browser.  Firefox for example.  The same URL will open in English.

    Alternatively, on the right hand side, you can select language, but the change will probably not work.

    * * * * * * *

    Here is a copy paste of the article for you.

    ***** Start Article *****

    Problem


    Symantec Endpoint Protection (SEP) Clients do not update virus definitions.

    • Symantec Endpoint Protection Manager (SEPM) shows old virus definitions in "Admin > Server > Local Site > Show LiveUpdate Downloads".

     

     


     

    Environment


    SEPM 12.1
    WIndows 2003 SP 2 32 bit

    Windows Server 2008 R2 64bit

    SEP clients Windows XP , Windows 7 .


     

    Cause


    Old or corrupted virus definitions present on the SEPM prevent the SEPM's ability to update the SEP clients with new virus definitions.


     

    Solution


    1. Delete the content of folder "C:\Documents and Settings\All users\Application Data\Symantec\LiveUpdate\Downloads\"
    Note: Application Data is a hidden folder. Delete the content of the Downloads folder, but not the folder itself.

    2. Stop the service "Symantec Endpoint Protection Manager".
    To stop this service:

    1. Go to Start > Run.
    2. Type the following: Services.msc
    3. Select and stop the above mentioned service

    3. Delete the numbered or TMP folders inside the paths:

    • %programfiles%\symantec\symantec endpoint protection manager\inetpub\content\{535CB6A4-...
    • %programfiles%\symantec\symantec endpoint protection manager\inetpub\content\{07B590B3-...
    • %commonprogramfiles%\Symantec Shared\SymcData\spcVirDef32
    • %commonprogramfiles%\Symantec Shared\SymcData\spcVirDef64

    Note 1: In Server 2008, the Downloads folder in step 1 is located at %programdata%\Symantec\LIveUpdate\Downloads
    Note 2: In 64 bit operating systems the "Symantec\Symantec Endpoint Protection Manager\inetpub\content" folder will be located in C:\Program Files (x86) and not C:\Program Files
    Note 3: For Windows Server 2008 or similar systems the location of the %commonprogramfiles%\Symantec Shared\SymcData\ will be following: C:\ProgramData\Symantec\Definitions\SymcData\

    4. Launch the process LUALL.EXE

    5. Restart the Symantec Endpoint Protection Manager service when LiveUpdate is complete.

    1. Log on to Symantec Endpoint Protection Manager Console and launch a LiveUpdate from Admin > Server > Local Site > Download LiveUpdate content.
    2. Verify the correct download/usage of new virus definitions from "Admin > Server > Local Site >Show LiveUpdate Downloads".


  • 5.  RE: Clients not Update Virus Definition from Server



  • 6.  RE: Clients not Update Virus Definition from Server

    Posted Feb 14, 2012 12:03 PM

    Its not a Proxy issue.



  • 7.  RE: Clients not Update Virus Definition from Server

    Posted Feb 14, 2012 12:15 PM

    Just noticed your Sig says SEP 11.0.6

    Here you go.

    http://www.symantec.com/business/support/index?page=content&id=TECH104721



  • 8.  RE: Clients not Update Virus Definition from Server

    Posted Feb 14, 2012 12:19 PM

    Thanks for the link but Im on 12.1 Now I need to update my sign. I let you know the results of the Jadon 1222 Post



  • 9.  RE: Clients not Update Virus Definition from Server

    Posted Feb 14, 2012 01:32 PM

    Here the LU ALL Log:

    February 14, 2012 2:23:34 PM BOT:  LiveUpdate succeeded.  [Site: SEP_SERVER]  [Server: SEP_SERVER]
    February 14, 2012 2:23:34 PM BOT:  LUALL.EXE finished running.  [Site: SEP_SERVER]  [Server: SEP_SERVER]
    February 14, 2012 2:23:30 PM BOT:  LUALL.EXE successfully updated the content. Return code = 0.  [Site: SEP_SERVER]  [Server: SEP_SERVER]
    February 14, 2012 2:23:22 PM BOT:  No updates found for Centralized Reputation Settings 12.1.  [Site: SEP_SERVER]  [Server: SEP_SERVER]
    February 14, 2012 2:23:21 PM BOT:  No updates found for SONAR scan engine Win32 11.0.  [Site: SEP_SERVER]  [Server: SEP_SERVER]
    February 14, 2012 1:56:26 PM BOT:  No updates found for SONAR scan engine Win64 11.0.  [Site: SEP_SERVER]  [Server: SEP_SERVER]
    February 14, 2012 1:56:26 PM BOT:  No updates found for Submission Control signatures 11.0.  [Site: SEP_SERVER]  [Server: SEP_SERVER]
    February 14, 2012 1:52:38 PM BOT:  No updates found for SONAR scan data 11.0.  [Site: SEP_SERVER]  [Server: SEP_SERVER]
    February 14, 2012 1:52:38 PM BOT:  Symantec Endpoint Protection Manager could not update Symantec Whitelist 12.1.  [Site: SEP_SERVER]  [Server: SEP_SERVER]
    February 14, 2012 1:40:55 PM BOT:  No updates found for SONAR scan commercial application engine 11.0.  [Site: SEP_SERVER]  [Server: SEP_SERVER]
    February 14, 2012 1:34:43 PM BOT:  No updates found for Symantec Endpoint Protection Manager Content Catalog 12.1.  [Site: SEP_SERVER]  [Server: SEP_SERVER]
    February 14, 2012 1:00:58 PM BOT:  No updates found for Symantec Endpoint Protection Win64 11.0.6200.754 (English).  [Site: SEP_SERVER]  [Server: SEP_SERVER]
    February 14, 2012 1:00:58 PM BOT:  No updates found for Symantec Endpoint Protection Win64 12.1 (English).  [Site: SEP_SERVER]  [Server: SEP_SERVER]
    February 14, 2012 1:00:57 PM BOT:  No updates found for Symantec Endpoint Protection Win32 12.1 (English).  [Site: SEP_SERVER]  [Server: SEP_SERVER]
    February 14, 2012 1:00:57 PM BOT:  No updates found for Symantec Endpoint Protection Win32 11.0.6200.754 (English).  [Site: SEP_SERVER]  [Server: SEP_SERVER]
    February 14, 2012 1:00:54 PM BOT:  No updates found for SPC AntiVirus Client Mac 11.0 (English).  [Site: SEP_SERVER]  [Server: SEP_SERVER]

     

    Most Recent Download Screen show 01/31/2012 r32

    Home Screen on Windows Definitions show 02/13/2012 r2

    Latest on Manager 02/09/2012 r34

     



  • 10.  RE: Clients not Update Virus Definition from Server

    Posted Feb 14, 2012 02:32 PM

    Have you tried deleteing the old definitions?

    You also can try running a repair on the SEPM.

    As the manager does not seem to be updatin itself either.



  • 11.  RE: Clients not Update Virus Definition from Server

    Posted Feb 14, 2012 02:46 PM

    Yes

    I repair the SEPM 2 times... Same issue

    Its like SEPM do not push the new Virus Definitions



  • 12.  RE: Clients not Update Virus Definition from Server

    Posted Feb 14, 2012 03:52 PM

    February 14, 2012 4:50:05 PM BOT:  Symantec Endpoint Protection Manager could not update Virus and Spyware definitions Win32 12.1.  [Site: SERVERNAME]  [Server: SERVERNAME]
    February 14, 2012 4:50:04 PM BOT:  Symantec Endpoint Protection Manager could not update Virus and Spyware definitions Win64 12.1.  [Site: SERVERNAME]  [Server: SERVERNAME]

     

    This appear to be a Bug...

    Any Idea?
     



  • 13.  RE: Clients not Update Virus Definition from Server

    Posted Feb 14, 2012 09:21 PM

    Any suggestion Please...



  • 14.  RE: Clients not Update Virus Definition from Server

    Broadcom Employee
    Posted Feb 14, 2012 09:35 PM

    can you pass on the liveupdate log?



  • 15.  RE: Clients not Update Virus Definition from Server

    Posted Feb 15, 2012 05:03 AM

    Hi, I am encounter this issue too. In the liveupdate log, no error and I had done SEPM repair, remove suspected corrupted file and other. At the end I manage to update the SEPM antivirus defitions only but after 1 day back to normal. Please advise.



  • 16.  RE: Clients not Update Virus Definition from Server

    Posted Feb 15, 2012 07:18 AM

    Avatar, I think is a issue of the SEPM all my clients have the green dot con the SEP Icon.

    all my clients have the correct policy and communication with thse SEPM

    The issue is SEPM do not push the virus definition to the clients.



  • 17.  RE: Clients not Update Virus Definition from Server
    Best Answer

    Posted Feb 15, 2012 12:17 PM

    People I solve this issue.

    1. Backup SEPM Database Using Database Backup Tool from SEPM

    2. Backup Security Keys and License Files

    3. Uninstall SEPM

    4. Restart the Server

    5. Install SEPM 12.1 (Default Options)

    6. Restore Database using Database Backup Tool from SEPM

    7. Run Live Update from LUALL.EXE (Not from SEPM Console.

    8. Run Live Update from SEPM Console.

    9. Update Content to my clients groups.

    This work for me. Voting + are welcome

    Good Luck :)