Endpoint Protection

 View Only
  • 1.  "defintions released" vs "extended version"

    Posted Apr 18, 2013 08:25 AM

    Could somebody tell me the difference between "defintions released" and "extended version" on this webpage here: http://www.symantec.com/security_response/definitions.jsp

    For example:

    Behavior-based protection says defintions released 4/10/13 and extended version 4/4/2013 rev. 11. The extended version is what is installed on my clients. When I run liveupdate on the SEPM it completes successfully saying no new updates found. I was under the impression that behavior-based protection (truscan or proactive protection) defintions are released daily. Has this changed in 12.1?

    SEPM version 12.1.2015.2015

    Client version 12.1.2015.2015



  • 2.  RE: "defintions released" vs "extended version"
    Best Answer

    Posted Apr 18, 2013 08:34 AM

    hi

     

    File-based AV - Updated daily (typically three times a day Monday through Friday; one time a day on weekends).

    So, the date on which the definitions get released are known as "Definitions Released" and the certified definitions releases are marked with a revision number (as there are 3 releases a day ) which are known as "Extended version".

    http://www.symantec.com/security_response/definitions.jsp

    Definitions Released: 3/25/2013
    Extended Version: 3/25/2013 rev. 24
     

    How often are Endpoint Protection definitions for IPS, SONAR, and Download Protection released?

    http://www.symantec.com/docs/TECH178271

    Secondly, 

    Network-Based Protection (IPS)- Updated on Weekdays (M-F - no releases scheduled for weekend or major holidays in the United States).

    Behavior-Based Protection / Proactive Threat Protection - There is no set schedule.

    Reputation-Based Protection (Insight) - Continually updated as it is a cloud based detection

     



  • 3.  RE: "defintions released" vs "extended version"

    Posted Apr 18, 2013 08:39 AM

    The "Definitions Released" is the actual day they get released

    The "Extended Version" is the date that will show on your client, ie. 4/17/2013 rev. 25



  • 4.  RE: "defintions released" vs "extended version"

    Posted Apr 18, 2013 08:39 AM

    Thanks for clearing that up.



  • 5.  RE: "defintions released" vs "extended version"

    Posted Apr 18, 2013 08:42 AM

    Any idea why for behavior-based the extended version is older than the defintions released date?

    Definitions Released: 4/10/2013
    Extended Version: 4/4/2013 rev. 11
     
    (edit: spelling)

     



  • 6.  RE: "defintions released" vs "extended version"

    Posted Apr 18, 2013 08:49 AM

    Those are for SONAR. They are not released as often as traditional AV signatures. Maybe once every week or two.



  • 7.  RE: "defintions released" vs "extended version"

    Trusted Advisor
    Posted Apr 18, 2013 10:08 AM

    Hello,

    Is this a DUPLICATE to the Thread:

    https://www-secure.symantec.com/connect/forums/definitions-0

    very similar query.