Endpoint Protection

Hi Guys,

For past 10 days, we are receiving alert from SEPM as more than 200+ systems are having old download protection definitions. How come suddenly these many systems are not updating the definitions. Is there any way to troubleshoot. Please help

Does any GUP available between sep client and SEPM ?

Troubleshooting Out-of-date Definitions on Clients (Part 2)

http://www.symantec.com/tv/allvideos/details.jsp?vid=2236084558001

Troubleshooting Out-of-date Definitions on Clients (Part 1)

http://www.symantec.com/tv/allvideos/details.jsp?vid=2236084589001

Did you login to any one of those and see if they are indeed out of date?

Need to figure out if the problem is at the client end or at SEPM end. How you have configured the liveupdate? is it only insight download protection or AV/AS as well.

Hi

No GUP is available. direct Client and SEPM connectivity

Hi,

Ya i have logged in and it is out of date only

and also it is only insight dowload protections not AV

Hi Srikanth,

Can you please post the sylink.log from any client? does it say its out of date or DI is disabled?

What does Support tool say?

Hello Srikanth,

Are these clients running on older SEP 11.x? If yes, they may face issues with definitions as the 11.x definitions are no more getting released.

If not, then in your case where there is no LUA / GUP in between, we may need your assistance by pulling sylink.log from any of machines which are not being updated.

http://www.symantec.com/docs/TECH104758

Secondly, are these machines all from the same group?

When was the last time you restarted the SEPM server?

Was there any change in proxy or firewall during these 10 - 15 day period?

Run the symhelp tool on one of the affected clients, let's see what it shows.

Hi,

Could you confirm the SEPM and SEP clients version?

Have you reapaird the SPEM?

Hi,

we have raised, a case in symantec technical support..but still we didnt get any proper response from them