Endpoint Protection Small Business Edition

Hello

On one of client" Download Protection Definition" is out of date. SEPM don't reported it and I wondering what Download Protection Definition is. Why it don't get update? "Update content" option don't work The same client has also problem with tamper protection - it's reported as malfunctioning  . Symantec version 12.1.4112.4156   . Are those two thing connected ? Thank you for answers .

This is part of the Download Insight component used to scan downloads to see if they're malicious or not.

Expected behavior of Download Insight

Tamper protection and Download Protection are two different components.

Have you tried running a LiveUpdate session on the client?

For troubleshooting, run the symhelp tool on it to see what issues come up:

Troubleshooting computer issues with the Symantec Help support tool

ok, I will try it . Thank you

You're welcome. If you have further issues and/or questions then please check back in here.

Hi,

Tamper protection and Download protection are not actually the same, check the below definitions.

Tamper protection:

Tamper Protection provides real-time protection for Symantec applications that run on servers and clients. It prevents non-Symantec processes such as worms, Trojan horses, viruses, and security risks, from affecting Symantec resources. You can configure the software to block or log attempts to modify Symantec resources. 

Download protection:

Download Protection is part of Auto-Protect and gives Symantec Endpoint Protection the ability to track URLs. The URL tracking is required for several policy features.

If you install Symantec Endpoint Protection without Download Protection, Download Insight has limited capability. Browser Intrusion Prevention and SONAR require Download Protection.

The Automatically trust any file downloaded from an intranet website option also requires Download Protection.

I feel definitions might have corrupted in this case however to decide definitions are corrupted look into the following location:

%programfiles%\Common Files\Symantec Shared\VirusDefs

If there are up to 3 numbered folders, this is the normal behavior of a SEP client.

Also, having more than 3 folders is not always a cause for concern, though if there is a high number of virus defs folders retained for a long period of time, it may indicate underlying virus definition corruption.

This article can give provide more details: How to determine if virus definitions of Symantec Endpoint Protection client (SEP) 11 or 12 Small Business Edition, are corrupted

http://www.symantec.com/docs/TECH97677

If definitions are corrupted can try to clear it manually. Follow this article: How to clear out definitions for a Symantec Endpoint Protection 12.1 client manually

http://www.symantec.com/docs/HOWTO59193

Try to repair the SEP clients through control panel/programs & features as well.

Thank you all

You're welcome.

If your query has been resolved can mark this thread as a solved. Thanks!