Endpoint Protection

 View Only
Expand all | Collapse all

Definition out of date

Srikanth_Subra

Srikanth_SubraOct 12, 2012 02:57 AM

  • 1.  Definition out of date

    Posted Oct 11, 2012 11:30 PM

    Hi,

    In SEPM some of the clients are showing as definitions out of date. but when we checked in clients all are up to date..

    Why we are getting out of date even though it is up to date?

    Clients can communicate to server perfectly.



  • 2.  RE: Definition out of date

    Posted Oct 11, 2012 11:36 PM

    SEPM Console showing Client Online ?

    Are you using Image OS ?

    Image Installation System Problem

    https://www-secure.symantec.com/connect/downloads/image-installation-system-problem

    How to repair duplicate IDs on cloned Symantec Endpoint Protection 12.1 clients

    http://www.symantec.com/business/support/index?page=content&id=TECH163349

    How to prepare a Symantec Endpoint Protection 12.1 client for cloning

    http://www.symantec.com/business/support/index?page=content&id=HOWTO54706

     

    Check this thread same issue

    https://www-secure.symantec.com/connect/forums/sepm-121-shows-clients-not-updating-clients-do-update



  • 3.  RE: Definition out of date

    Broadcom Employee
    Posted Oct 12, 2012 12:31 AM

    has teh client lately communicated with the SEPM?

    can you post the sylink log from client?



  • 4.  RE: Definition out of date

    Posted Oct 12, 2012 12:55 AM

    Hi,

    Clients are showing online only

    we are not using Image OS



  • 5.  RE: Definition out of date

    Posted Oct 12, 2012 01:16 AM

    HI,

    How many system having issue ?

    Check this comments

    Hello,

    What version of SEPM 12.1 are you running?

    Could you check if the Disk space on the SEPM server?

    Try Increasing the heartbeat interval to feasible value (eg. 500 computers 1 hr interval). 

    Delete entries from data/inbox/agentinfo folder and .tmp files from data/inbox.

     



  • 6.  RE: Definition out of date

    Posted Oct 12, 2012 01:41 AM

    some 10 systems..

    SEPM 12.1 RU1 MP1

    More free space of about 150 GB available

     



  • 7.  RE: Definition out of date

    Posted Oct 12, 2012 01:50 AM

    hi,

    try to one or two system.

    1) Remove SEP client on sepm console

    2) Delete hardware id.

    3) Replace syslink.xml file.



  • 8.  RE: Definition out of date

    Posted Oct 12, 2012 02:41 AM

    If i delete the client from SEPM and give update policy in client it will come in SEPM again na?



  • 9.  RE: Definition out of date

    Posted Oct 12, 2012 02:50 AM

    Yes , SEP client will be come next heartbeat interval.



  • 10.  RE: Definition out of date

    Posted Oct 12, 2012 02:57 AM

    i will check and update this



  • 11.  RE: Definition out of date

    Posted Oct 12, 2012 04:13 AM

    What is the Hert Beat Interval time?

    These cleints are directly communicate with Server or it through GUP.?

    How many clients are same issue?

     



  • 12.  RE: Definition out of date

    Posted Oct 12, 2012 06:53 AM

    All are directly communicating to server not through GUP



  • 13.  RE: Definition out of date

    Posted Oct 12, 2012 02:21 PM

    Hi,

     

    on 2-3 client check the time when definition was downloaded(client side GUI go to view logs-->client status-->system logs).

    and check last check in time on console.

    normally two heartbeat interval time is required for download definition  ,submit logs to sepm and process log on SEPM



  • 14.  RE: Definition out of date

    Posted Oct 14, 2012 05:42 AM

    It possible if these clients has corrupted definition

    try the below link in one system and if it help then try to other

     

    Share the result after testing

    Check these artical.

    https://www-secure.symantec.com/connect/articles/how-clear-corrupt-virus-definitions-sepm

    http://www.symantec.com/business/support/index?page=content&id=HOWTO59193

    Try running utility "Rx4DefsSEP" on 2-3 affected machines & check.

    http://www.symantec.com/business/support/index?page=content&id=TECH93036&locale=en_US

    Check this thread

    https://www-secure.symantec.com/connect/forums/what-controls-sepm-managed-clients-definition-revision-count

    https://www-secure.symantec.com/connect/forums/purging-sep-11-virus-definition

    https://www-secure.symantec.com/connect/forums/how-clean-previous-virus-definition-sep125

     

    Download

    https://www-secure.symantec.com/connect/downloads/remove-virus-definitions