Endpoint Protection

Hello,

Recently, Win32 virus defs are no longer being installed on our SEPM 12.1 RU2 server.

When using LiveUpdate via a scheduled task, the web console, or when running LUALL.exe from the command line, content is being downloaded successfully to the following folder:

C:\Program Files\Common Files\Symantec Shared\SymcData\spcVirDef32

However, the new virus defs do not get installed to the server:

C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content\{535CB6A4-441F-4e8a-A897-804CD859100E}

Windows event log reports the following:

Event Type:     Warning
Event Source:   SEPM
Event Category: Content
Event ID:       7203
Description:
Info:Content install failed on the server.
Product:Virus and Spyware definitions Win32 12.1 RU2
Version:MicroDefsB.CurDefs
Language:SymAllLanguages
Monikers:{535CB6A4-441F-4e8a-A897-804CD859100E},{D2EE983B-0AB4-F6D4-00BE-1539CD0C259E}
Sequence:150416052
PublishDate:04-16-2015
Revision:52
Source:Public LiveUpdate Server (Symantec LiveUpdate Server)
Size(in bytes):1086767781

On the other hand, the Win64 virus defs are being downloaded and installed properly.

Please advise.

Thanks.

Please run the symhelp toll on it to check for errors

Download the Symantec Help (SymHelp) diagnostic tool to detect Symantec product issues

http://www.symantec.com/docs/TECH170752

Troubleshooting computer issues with the Symantec Help support tool

http://www.symantec.com/docs/HOWTO80839

Thanks for the links.

Unfortunately, I can't run SymHelp.exe due to an old version of .NET framework.

However, after looking through SesmLu.log, I came across the following:

ProductUtil Initialize Tomcat server xml file failed.

Followed by:

http://127.0.0.1:9090/servlet/ConsoleServlet?ActionType=ConfigServer&ClientMoniker={535CB6A4-441F-4e8a-A897-804CD859100E}&FilePath=C:\Program%20Files\Common%20Files\Symantec%20Shared\SymcData\spcVirDef32\20150416.052&Hash=F7BBE24918E01AAF700BDFA316EF47FB&Language=SymAllLanguages&Product=SEPM%20Virus%20Definitions%20Win32%2012.1%20RU2%20H&SequenceNum=150416052&SequenceTag=CurDefs&ServerMoniker={D2EE983B-0AB4-F6D4-00BE-1539CD0C259E}&SrcSequenceNum=150410001&Version=MicroDefsB.CurDefs&action=UploadLuContent

When I browsed to this URL, full.zip was created in the following folder:

C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Inetpub\content\{535CB6A4-441F-4e8a-A897-804CD859100E}\150416052

Once done, I re-started the Symantec Embedded Database service and the Symantec Endpoint Protection Manager service. A short while later, the \Full folder was created, and SEPM now properly reports that the Win32 defs are up-to-date.

It still puzzles me why this problem only seems to affect our Win32 defs.

Hi,

Today, I met the same problem with Content install failed on the server - Virus and Spyware definitions Win32 12.1 RU2

How to reslove this problem?? pls help me!

here is the Symantec Help file

Attachment(s)

[VII_ANTIVIRUS1]__2015-07-02__10-11-14_TSF_1.7z   3.80 MB 1 version